{ "type": "bundle", "id": "bundle--5b58e29a-cb98-42a6-8b3b-4a6802de0b81", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-02T14:10:22.000Z", "modified": "2018-08-02T14:10:22.000Z", "name": "CIRCL", "identity_class": "organization" }, { "type": "report", "spec_version": "2.1", "id": "report--5b58e29a-cb98-42a6-8b3b-4a6802de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-02T14:10:22.000Z", "modified": "2018-08-02T14:10:22.000Z", "name": "OSINT - Leafminer: New Espionage Campaigns Targeting Middle Eastern Regions", "published": "2018-08-02T14:10:22Z", "object_refs": [ "indicator--5b58e2ee-97bc-4e70-8b0f-4f1502de0b81", "indicator--5b58e2ef-80b4-4b9c-a511-4db702de0b81", "indicator--5b58e2ef-6df8-4c94-a941-4e9902de0b81", "indicator--5b58e2f1-f5a8-48bb-b820-4e4602de0b81", "indicator--5b58e2f2-73bc-41e5-b021-490b02de0b81", "indicator--5b58e2f3-86b0-4c1f-963d-471c02de0b81", "indicator--5b58e2f4-c574-4942-9ac3-415502de0b81", "indicator--5b58e2f5-0c10-4ead-ac47-402502de0b81", "indicator--5b58e2f6-f818-4b97-bdff-473f02de0b81", "indicator--5b58e2f7-f9e0-4e9f-a2ce-4f4b02de0b81", "indicator--5b58e2f8-f90c-4fed-941a-431202de0b81", "indicator--5b58e2f9-6164-4f59-aeb1-4bff02de0b81", "indicator--5b58e2fa-0614-46bf-b24a-43f702de0b81", "indicator--5b58e2fb-62b8-416a-a4a7-48f602de0b81", "indicator--5b58e2fc-e124-4d97-84e7-4a5802de0b81", "indicator--5b58e2fd-f4f8-478b-ad66-41e402de0b81", "indicator--5b58e2fe-e8a4-4624-9775-4a2a02de0b81", "indicator--5b58e2ff-5d54-49f4-a53b-466402de0b81", "indicator--5b58e300-8750-4e1d-9511-4d4d02de0b81", "indicator--5b58e301-2f44-4654-876b-41c202de0b81", "indicator--5b58e302-a1c0-4b65-a8c3-46a002de0b81", "indicator--5b58e303-38d4-46e0-8920-4a0702de0b81", "indicator--5b58e305-37f0-40fe-b781-428902de0b81", "indicator--5b58e306-3dc0-4301-b514-434302de0b81", "indicator--5b58e307-0818-493f-9bb7-4a0c02de0b81", "indicator--5b58e308-1024-4231-a377-4cdf02de0b81", "indicator--5b58e308-63d0-4db2-8c0a-44b102de0b81", "indicator--5b58e309-845c-41bb-bc1c-4bfe02de0b81", "indicator--5b58e309-12e0-4928-9c49-4bd202de0b81", "indicator--5b58e309-b644-4688-866d-426702de0b81", "indicator--5b58e30a-1f44-43cf-b9bd-4e2002de0b81", "indicator--5b58e30a-c74c-4dff-bfd9-4a6702de0b81", "indicator--5b58e30b-abbc-4d93-9cb7-4cc002de0b81", "indicator--5b58e30b-41c0-464a-978c-4de702de0b81", "indicator--5b58e30c-80e4-4de1-84b9-4a0702de0b81", "indicator--5b58e30c-ebb4-4f85-a816-4ff902de0b81", "indicator--5b58e30c-8a90-4753-b5dd-438802de0b81", "indicator--5b58e30d-c3f8-41fe-9a8d-430d02de0b81", "indicator--5b58e30d-9f6c-4178-ac25-467f02de0b81", "indicator--5b58e30e-6ac8-4dbf-abd1-459602de0b81", "indicator--5b58e30e-ad60-44af-910c-414102de0b81", "indicator--5b58e30e-8464-4e83-89a5-4d5502de0b81", "indicator--5b58e30f-b0b4-464d-a382-4cdd02de0b81", "indicator--5b58e30f-2c54-4980-ac88-426a02de0b81", "indicator--5b58e310-bd40-4f18-8626-490702de0b81", "indicator--5b58e310-c520-4489-8a06-487d02de0b81", "indicator--5b58e310-1644-4ac5-9187-469302de0b81", "indicator--5b58e323-e58c-4b68-9a15-489d02de0b81", "indicator--5b58e324-23e8-4481-9f77-4f5502de0b81", "indicator--5b58e324-6a38-4570-b95f-411002de0b81", "indicator--5b58e325-8cdc-4058-acf6-446502de0b81", "indicator--5b58e325-fccc-4093-b3bf-4a4702de0b81", "indicator--5b58e325-d9a0-4f1a-922b-45b702de0b81", "indicator--5b58e326-69fc-48f0-8d01-491a02de0b81", "indicator--5b58e33a-5904-4967-998a-4def02de0b81", "indicator--5b58e33a-a1b0-4f4a-8c4c-433d02de0b81", "indicator--5b58e33b-e894-4db9-8753-401002de0b81", "observed-data--5b58e3c5-2c90-4941-9b8f-479a02de0b81", "url--5b58e3c5-2c90-4941-9b8f-479a02de0b81", "x-misp-attribute--5b58e3d9-bd80-43a1-a4c7-4f0702de0b81", "x-misp-object--b4137388-e6d6-4ad5-9279-cf94b064002a", "x-misp-object--7e43aced-7d72-4b63-831b-c9fb69c79ec5", "x-misp-object--2fcc008b-3b14-4ba4-8b42-a7b810102a7c", "x-misp-object--ad25b1d7-45f7-47ed-a474-a63310ffc5a7", "x-misp-object--40e176cd-33bf-428f-8dc7-e7eb0657ccc4", "x-misp-object--30652bda-a360-426f-89ae-f6257c566381", "x-misp-object--c8a57b71-f1b8-491b-91df-f591fcd2c841", "x-misp-object--922c585b-1cba-463b-9a0b-6b995bf2c886", "x-misp-object--4d4867f5-58bd-476d-bbb6-880d35895c1c", "x-misp-object--910ea1f7-d0cf-4776-8d22-d14dbb5b0d3c", "x-misp-object--44037150-0f77-4e34-9b1b-f932434486ea", "x-misp-object--1d1bbb27-8c0f-4c25-811b-e406e8056538", "x-misp-object--1bfe243a-d171-4eb6-b5a8-6f750ae94dd5", "x-misp-object--ca66551a-7048-493e-a8c4-23455d756628", "x-misp-object--d5bf8c36-3135-4442-8fa6-c8f7b46462dd", "x-misp-object--675a3865-7c5e-42bc-abf6-1051b955ca9a", "x-misp-object--4ca44390-aea3-4649-b947-87e3382d214e", "x-misp-object--27f2127a-9dd0-4d0d-b321-fa1c3e5a3abc", "x-misp-object--87c335c3-8aad-426d-9e25-50b8d69359bc", "x-misp-object--fa4c3080-e422-4c59-9329-fd4ad1fabae0", "x-misp-object--1d29953f-0ac9-4077-ae2c-78f16d033b15", "x-misp-object--712090b0-f46c-4bd2-9c47-1546ec19f1f7", "x-misp-object--efb30889-667b-4c76-b0ad-f26d45ab1aad", "x-misp-object--e1ce1e3e-6474-41ab-b48d-ec7fccfd8d1d", "x-misp-object--0c937616-7955-4a82-ad51-7343884f4b4a", "x-misp-object--9a9a003c-ee07-4826-8ed5-801368161b7b", "x-misp-object--65f0ff96-312c-4873-846a-15494be2de1e", "x-misp-object--880f0101-1add-48aa-b31c-a93caa161553", "x-misp-object--b97ff240-fb02-48ac-a995-cfe470d09cb0", "x-misp-object--122569c6-a777-4b6d-b825-92590b0b85c8", "x-misp-object--1301207f-edce-4810-b7f6-00084264ce54", "x-misp-object--5048a4e7-752a-4639-93da-136abb92ce3b", "x-misp-object--6e967f61-6604-4932-bd83-7e54a2862b86", "x-misp-object--1f3ec55a-7cd1-41d6-ad73-ea62a64a6efd", "x-misp-object--81ee6e30-8a76-4f90-a300-c1cc5375b3f6", "x-misp-object--6751acd9-30f4-4045-ae06-746005d73a99", "x-misp-object--3bd7d553-2d5d-44c9-83fb-bd5ff9ba553d", "x-misp-object--2a9bd36d-b91f-483d-8b2f-9a5dd2d56d4a", "x-misp-object--c3416779-cdc1-49f7-bb9b-55eb69abf547", "x-misp-object--d26d5a46-004a-4da7-a1db-6d34c0a84d65", "x-misp-object--341215a7-a4f6-4c73-91c6-bce2fb47563e", "x-misp-object--66670f5f-0a18-48fb-9fa8-8a0557dfe6d7", "x-misp-object--d3986e5a-1831-4613-9ded-a8bd4117673c", "x-misp-object--c92a8a8b-12ca-42df-9edb-08a5e3cfa48c", "x-misp-object--8bf0ce4c-f54d-442b-a9e4-92a693e079a8", "x-misp-object--23845d4a-e174-4592-bafd-a4ea6e7bda43", "x-misp-object--5bdc4683-2cc9-40c4-8a31-2b4d6b0f7688", "x-misp-object--6108bce3-e69a-4b39-82c3-39257a7cdb82", "x-misp-object--948044e2-5ce6-422b-944b-539b9512caf1", "x-misp-object--c854e3e3-b985-43bb-a4ce-691f06c5677d", "x-misp-object--1c646e8e-6ee8-4c11-8199-aa1060dc6b9e", "x-misp-object--db181660-68fa-4e97-bf75-86295ba46f1d", "x-misp-object--af26c4fe-952f-482e-b1c7-64e8ec4587dd", "x-misp-object--3cc8e8c8-8a37-43dc-ad1b-a3fe8178a358", "x-misp-object--cb8c1f90-8fa5-40a3-9fa3-dc1415a2be70", "x-misp-object--37d37c7c-c665-4cc0-b7d2-75a5bae96999", "x-misp-object--2809ae6d-0f07-46c0-a476-dfeec3076b23", "x-misp-object--b1df06cf-64e3-4cf9-b7d0-7b7107d06abf", "x-misp-object--fd9e918c-a015-42aa-8c06-18d603937354", "x-misp-object--ca56de15-15e7-4dea-b035-1d253f952c52", "x-misp-object--2ab6ee33-dce7-4fe2-8fc1-9a352a6b58c7", "x-misp-object--d3dbfdd6-7eae-4dae-953b-6d8d56c6a82d", "x-misp-object--5e34ef7e-4080-4342-a2ed-a45eaa252537", "x-misp-object--e409b3d9-42dc-4f10-8b9a-ee88f8b8ad3f", "x-misp-object--c3d921b7-e61e-4056-aa56-8d697f5768b8", "x-misp-object--464d3928-33d4-43f4-9685-3fdc23ba76a3", "relationship--b4725765-4a34-47cb-b1bc-a1c4fd356478", "relationship--5f41c313-3aa4-4e07-94ad-94dae7f57d32", "relationship--b2211b75-da71-4bb7-9490-d8a60d59a0cf", "relationship--20797b17-9ced-4877-9531-88fe5fbb946c", "relationship--e5e57d73-89b6-42fb-a592-1a0e0fdd7a98", "relationship--736d1f3e-bbf5-4b0f-8bf3-73a176a88ae8", "relationship--d659da95-5f5a-4a45-a645-cc89c77b2d53", "relationship--7c6f5bcb-12fd-4297-bf84-bf9560674769", "relationship--581a45cb-265c-40e2-932c-d5b94b1b47bb", "relationship--a1d43f7f-cc51-4d71-bda2-3ab795dd2350", "relationship--dc866114-77c4-4cf9-a681-67b24a31484e", "relationship--af976628-33ac-4287-9199-7bb0f3888d32", "relationship--ddf0f4ba-ace9-4002-afa1-796ea71947e7", "relationship--08c950e1-8aa4-4ca7-bbea-ac3bd5ea9cbe", "relationship--b3ddaadb-1467-414a-8d99-deb3825a0ef6", "relationship--cf497cf3-60ba-429e-a0d5-67f877fe1400", "relationship--6828660c-aca9-4652-b65f-c4c0af43a127", "relationship--1330f00b-4d22-4721-ac5b-9ab410113513", "relationship--476e4b37-c936-4720-b1f5-2b1702588e5f", "relationship--76ea30a3-0c81-4da5-aeb8-9fd0c41402a7", "relationship--d6f38167-2b05-42a5-b775-4e212b723b1a", "relationship--264d7441-c745-469e-a85e-d620c901cccc", "relationship--6191fb20-2f5b-4ca1-9c00-79c1aef5400b", "relationship--0726b967-60e8-4585-b702-57541d54f3db", "relationship--4ad9dcab-701c-4e5b-b924-bac726a543a4", "relationship--d3b2bb5a-0f0c-4d5f-9140-5a8948def49a", "relationship--d45223b0-01f5-497b-8e2d-bfe950153ba6", "relationship--4ead61ff-437c-4126-92c8-73bfd82fb917", "relationship--8aaf4ba2-0061-4bdd-a91f-2b89f67e51b6", "relationship--7b15fc5a-e994-4efd-980c-9cdc0dc354ec", "relationship--e0e050e5-20ba-4fae-ab32-6d2bbc1faba5", "relationship--6814ae0d-22d9-491a-8168-1f50af4b3a1e", "relationship--72b0ec38-8d63-40c1-b086-97daf5457265" ], "labels": [ "Threat-Report", "misp:tool=\"MISP-STIX-Converter\"", "estimative-language:confidence-in-analytic-judgment=\"moderate\"", "osint:source-type=\"blog-post\"", "misp-galaxy:threat-actor=\"RASPITE\"" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2ee-97bc-4e70-8b0f-4f1502de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:51:58.000Z", "modified": "2018-07-25T20:51:58.000Z", "pattern": "[file:hashes.SHA256 = '09653415084e64caed272f089610c5218a60372e17755ba71176785736e71c0d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:51:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2ef-80b4-4b9c-a511-4db702de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:51:59.000Z", "modified": "2018-07-25T20:51:59.000Z", "pattern": "[file:hashes.SHA256 = '09a20ca2db5b75f4ee55874929dec64acfffa46d54a4ed561b9c3f04baa91d52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:51:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2ef-6df8-4c94-a941-4e9902de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:51:59.000Z", "modified": "2018-07-25T20:51:59.000Z", "pattern": "[file:hashes.SHA256 = '1e4f56a1999ffa5376ef0acaaa5da0993f07e9c5aa1c222e297db7a4117d04b1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:51:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2f1-f5a8-48bb-b820-4e4602de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:01.000Z", "modified": "2018-07-25T20:52:01.000Z", "pattern": "[file:hashes.SHA256 = '200ec4e8f16ed205cf94c02fcd73ee43ee511fa44ce34c458a1fca195c4bc737']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2f2-73bc-41e5-b021-490b02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:02.000Z", "modified": "2018-07-25T20:52:02.000Z", "pattern": "[file:hashes.SHA256 = '2591b50355ed8053c8ed2e122f0b5769dd52c6d0b658cd0f2847f39056c6ac8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2f3-86b0-4c1f-963d-471c02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:03.000Z", "modified": "2018-07-25T20:52:03.000Z", "pattern": "[file:hashes.SHA256 = '332762804dd17f9b81620ea60ca8962daa493df24f6d98799d784d50fd4d0108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2f4-c574-4942-9ac3-415502de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:04.000Z", "modified": "2018-07-25T20:52:04.000Z", "pattern": "[file:hashes.SHA256 = '3373d81a74c1ea75c794244b2c6d4e5fb246224128412b9348291e2f68994d83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2f5-0c10-4ead-ac47-402502de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:05.000Z", "modified": "2018-07-25T20:52:05.000Z", "pattern": "[file:hashes.SHA256 = '36e9c95b65692b110f4fe2ed27aa6066368c07525c020ec081b59bad272e6172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2f6-f818-4b97-bdff-473f02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:06.000Z", "modified": "2018-07-25T20:52:06.000Z", "pattern": "[file:hashes.SHA256 = '48529fc232a99b8cfa14cdc1b982615e9a96942b4e0a79e4a88d504faac74c7c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2f7-f9e0-4e9f-a2ce-4f4b02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:07.000Z", "modified": "2018-07-25T20:52:07.000Z", "pattern": "[file:hashes.SHA256 = '4b16cb8b0eaeb8449d35290edb00beb3002852ad0225f52e5476e16c853447c5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2f8-f90c-4fed-941a-431202de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:08.000Z", "modified": "2018-07-25T20:52:08.000Z", "pattern": "[file:hashes.SHA256 = '58c9e11a2cd18bc6762753b27225423257b0d8e84592a7fe8b1c9bdd97129546']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2f9-6164-4f59-aeb1-4bff02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:09.000Z", "modified": "2018-07-25T20:52:09.000Z", "pattern": "[file:hashes.SHA256 = '670dc0a8182503b272f8a0f5cf93ea1e9f12fd46afdf4930249bc0fa588bac2d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2fa-0614-46bf-b24a-43f702de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:10.000Z", "modified": "2018-07-25T20:52:10.000Z", "pattern": "[file:hashes.SHA256 = '6f5b1269175d3937a5f92c62ff3ef1dd693827705d0d41456d93d5243c1dbaad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2fb-62b8-416a-a4a7-48f602de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:11.000Z", "modified": "2018-07-25T20:52:11.000Z", "pattern": "[file:hashes.SHA256 = '70c30b4cc6a9a420bec3ad25a0147c7ff91535a04ece95036334cb23044eda4e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2fc-e124-4d97-84e7-4a5802de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:12.000Z", "modified": "2018-07-25T20:52:12.000Z", "pattern": "[file:hashes.SHA256 = '7897406109e2454e4d99044e24a2d4fe5902473c2c76b82c2569336805989482']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2fd-f4f8-478b-ad66-41e402de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:13.000Z", "modified": "2018-07-25T20:52:13.000Z", "pattern": "[file:hashes.SHA256 = '7b06957c6b8450953967eb9c5f762e389a92fcf761b6885b7cb6dd2407641f3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2fe-e8a4-4624-9775-4a2a02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:14.000Z", "modified": "2018-07-25T20:52:14.000Z", "pattern": "[file:hashes.SHA256 = '7b8d27bfd5f2199e984c3038ce7625069f9ee0ec57dbfd7998e37afbe18011f3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e2ff-5d54-49f4-a53b-466402de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:15.000Z", "modified": "2018-07-25T20:52:15.000Z", "pattern": "[file:hashes.SHA256 = '7d829abe26b30ced467513e95f3448bc9f30de2fdced81c20b0d7699bd69c644']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e300-8750-4e1d-9511-4d4d02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:16.000Z", "modified": "2018-07-25T20:52:16.000Z", "pattern": "[file:hashes.SHA256 = '84803151c5b73a53de91844968f377e6ee33ba82910aa1f612595a19aeb7e529']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e301-2f44-4654-876b-41c202de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:17.000Z", "modified": "2018-07-25T20:52:17.000Z", "pattern": "[file:hashes.SHA256 = '85e9b5c3bd88a0c2b535c8d89ed0e9f875895e758228da16b5a46f6ff70e7e77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e302-a1c0-4b65-a8c3-46a002de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:18.000Z", "modified": "2018-07-25T20:52:18.000Z", "pattern": "[file:hashes.SHA256 = '9aa8f2d9245d0e6cef375ed999da6a3c9715fbe2a20589fdb388a8687707133a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e303-38d4-46e0-8920-4a0702de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:19.000Z", "modified": "2018-07-25T20:52:19.000Z", "pattern": "[file:hashes.SHA256 = '9d3801af7f8270ee550f0e3bb31e2ead903c45849e099c80d3c34b0076ca7e6f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e305-37f0-40fe-b781-428902de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:21.000Z", "modified": "2018-07-25T20:52:21.000Z", "pattern": "[file:hashes.SHA256 = 'a115a2a704386293f4c5e7108b9dab6afc42d4647cbff47023f2d2039c6b72ae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e306-3dc0-4301-b514-434302de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:22.000Z", "modified": "2018-07-25T20:52:22.000Z", "pattern": "[file:hashes.SHA256 = 'a2155e4dd281ef7b01a1490943b7fb06706d7ef02c0f955611e941d06b6e3ccf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e307-0818-493f-9bb7-4a0c02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:23.000Z", "modified": "2018-07-25T20:52:23.000Z", "pattern": "[file:hashes.SHA256 = 'a36fc0d9cb5b415fa8d6fe89434aca931bc4d0f9ac56ada7b7b9a9e601966860']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e308-1024-4231-a377-4cdf02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:24.000Z", "modified": "2018-07-25T20:52:24.000Z", "pattern": "[file:hashes.SHA256 = 'a4ec0964b115cdc7c3e2fd2bd60651a5105981485a4cd9a1ce5e3d29222f6303']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e308-63d0-4db2-8c0a-44b102de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:24.000Z", "modified": "2018-07-25T20:52:24.000Z", "pattern": "[file:hashes.SHA256 = 'ac33d303a9903f8a181e323eff6f0053234546e9b963f6bd1a2867bbb70ce2f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e309-845c-41bb-bc1c-4bfe02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:25.000Z", "modified": "2018-07-25T20:52:25.000Z", "pattern": "[file:hashes.SHA256 = 'b13ce2692d7ea4ebf343916d1f4c6de8a73376d486d96f3e7ceddecab5068ccf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e309-12e0-4928-9c49-4bd202de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:25.000Z", "modified": "2018-07-25T20:52:25.000Z", "pattern": "[file:hashes.SHA256 = 'c05205771d1cb9bfbfd7139a7ec8f8364c2820d6de3bbb93806530f1dc7a4283']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e309-b644-4688-866d-426702de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:25.000Z", "modified": "2018-07-25T20:52:25.000Z", "pattern": "[file:hashes.SHA256 = 'c402e570ea5e69c42898cb6a1a6be39fa9f5a90e909c2d1a4a2276df80abca97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30a-1f44-43cf-b9bd-4e2002de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:26.000Z", "modified": "2018-07-25T20:52:26.000Z", "pattern": "[file:hashes.SHA256 = 'caa2bd3596cf15d4d09fad3d110052460bc05933587a16e13f879fe1469a1377']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30a-c74c-4dff-bfd9-4a6702de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:26.000Z", "modified": "2018-07-25T20:52:26.000Z", "pattern": "[file:hashes.SHA256 = 'cb34a8f0dacb1ddccd89e0f40822dbdb0a3e32bb22c0801325be53bff55afd85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30b-abbc-4d93-9cb7-4cc002de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:27.000Z", "modified": "2018-07-25T20:52:27.000Z", "pattern": "[file:hashes.SHA256 = 'd01f01cc4832786c2821bb51d1abf40efbdf5127cd1d11e674c76996f1f1b145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30b-41c0-464a-978c-4de702de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:27.000Z", "modified": "2018-07-25T20:52:27.000Z", "pattern": "[file:hashes.SHA256 = 'd152da24739964acc8cc9fbd8f60a8ae7b8f7903c37168ce53e01b451d4aba5d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30c-80e4-4de1-84b9-4a0702de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:28.000Z", "modified": "2018-07-25T20:52:28.000Z", "pattern": "[file:hashes.SHA256 = 'd1e4081b5fdeb09b280674e0c34f5495527a621bb4f42601f97f123761c514c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30c-ebb4-4f85-a816-4ff902de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:28.000Z", "modified": "2018-07-25T20:52:28.000Z", "pattern": "[file:hashes.SHA256 = 'd1ee0cf551e5fc37d482484d3de1c5718a5b8c9cfadd907b7b3ccf9324a599fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30c-8a90-4753-b5dd-438802de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:28.000Z", "modified": "2018-07-25T20:52:28.000Z", "pattern": "[file:hashes.SHA256 = 'd94c5bd51cdbdd87ee4eb8005022be2ed763c791660416212a8e6a6b18576ac8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30d-c3f8-41fe-9a8d-430d02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:29.000Z", "modified": "2018-07-25T20:52:29.000Z", "pattern": "[file:hashes.SHA256 = 'de481b765df8a44dc7b8528bf4822332cbd6105bce780e3c99da2cc67ab1263b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30d-9f6c-4178-ac25-467f02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:29.000Z", "modified": "2018-07-25T20:52:29.000Z", "pattern": "[file:hashes.SHA256 = 'e3612f7e389695f6f4184cbdc5dc9512e370f3f3863afcb38a17d59d6ead8dc0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30e-6ac8-4dbf-abd1-459602de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:30.000Z", "modified": "2018-07-25T20:52:30.000Z", "pattern": "[file:hashes.SHA256 = 'e8f409387c6df73c201776633d44ac97d4fc1958bf79b1b36659e4bf904ccf28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30e-ad60-44af-910c-414102de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:30.000Z", "modified": "2018-07-25T20:52:30.000Z", "pattern": "[file:hashes.SHA256 = 'e931848dd6e5914e8ed0b287ef27544bf6c444fae05590a174307b437a1ea866']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30e-8464-4e83-89a5-4d5502de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:30.000Z", "modified": "2018-07-25T20:52:30.000Z", "pattern": "[file:hashes.SHA256 = 'ebd01e75c633c212265fe883e869b543b27c34819d8501a52dbd21fc2cb533fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30f-b0b4-464d-a382-4cdd02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:31.000Z", "modified": "2018-07-25T20:52:31.000Z", "pattern": "[file:hashes.SHA256 = 'efb340cf61009acc14b8463c185340bae0269b957143469dc7270af85ee2092d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e30f-2c54-4980-ac88-426a02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:31.000Z", "modified": "2018-07-25T20:52:31.000Z", "pattern": "[file:hashes.SHA256 = 'f67d378140f4aca98d4bd427eda7052ad1205dab8b6028a7fa00254d0c60aeea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e310-bd40-4f18-8626-490702de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:32.000Z", "modified": "2018-07-25T20:52:32.000Z", "pattern": "[file:hashes.SHA256 = 'fd026f5f3995b0664cde644da0d21b7488f5baabe0467dcec14092624b86b900']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e310-c520-4489-8a06-487d02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:32.000Z", "modified": "2018-07-25T20:52:32.000Z", "pattern": "[file:hashes.SHA256 = 'ff8c9d8c6f16a466d8e598c25829ec0c2fb4503b74d17f307e13c28fd2e99b93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e310-1644-4ac5-9187-469302de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:32.000Z", "modified": "2018-07-25T20:52:32.000Z", "pattern": "[file:hashes.SHA256 = 'ffb6acd2715dd988fe3c3fdbd7d45159f8e5b529eea506a856109a8696e93a80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e323-e58c-4b68-9a15-489d02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:51.000Z", "modified": "2018-07-25T20:52:51.000Z", "pattern": "[domain-name:value = 'adobe-flash.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e324-23e8-4481-9f77-4f5502de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:52.000Z", "modified": "2018-07-25T20:52:52.000Z", "pattern": "[domain-name:value = 'ilhost.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e324-6a38-4570-b95f-411002de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:52.000Z", "modified": "2018-07-25T20:52:52.000Z", "pattern": "[domain-name:value = 'iqhost.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e325-8cdc-4058-acf6-446502de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:53.000Z", "modified": "2018-07-25T20:52:53.000Z", "pattern": "[domain-name:value = 'offiice365.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e325-fccc-4093-b3bf-4a4702de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:53.000Z", "modified": "2018-07-25T20:52:53.000Z", "pattern": "[domain-name:value = 'adobe-plugin.bid']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e325-d9a0-4f1a-922b-45b702de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:53.000Z", "modified": "2018-07-25T20:52:53.000Z", "pattern": "[domain-name:value = 'microsoft-office-free-templates.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e326-69fc-48f0-8d01-491a02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:52:54.000Z", "modified": "2018-07-25T20:52:54.000Z", "pattern": "[domain-name:value = 'microsoft-office-free-templates-download.btc-int.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:52:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e33a-5904-4967-998a-4def02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:53:14.000Z", "modified": "2018-07-25T20:53:14.000Z", "description": "Watering Hole SMB URLs", "pattern": "[url:value = '51.254.173.240/file.gif']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:53:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e33a-a1b0-4f4a-8c4c-433d02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:53:14.000Z", "modified": "2018-07-25T20:53:14.000Z", "description": "Watering Hole SMB URLs", "pattern": "[url:value = 'adobe-plugin.bid/file.gif']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:53:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b58e33b-e894-4db9-8753-401002de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:53:15.000Z", "modified": "2018-07-25T20:53:15.000Z", "description": "Watering Hole SMB URLs", "pattern": "[url:value = '188.165.187.235/file.gif']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-07-25T20:53:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "observed-data", "spec_version": "2.1", "id": "observed-data--5b58e3c5-2c90-4941-9b8f-479a02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:33.000Z", "modified": "2018-07-25T20:55:33.000Z", "first_observed": "2018-07-25T20:55:33Z", "last_observed": "2018-07-25T20:55:33Z", "number_observed": 1, "object_refs": [ "url--5b58e3c5-2c90-4941-9b8f-479a02de0b81" ], "labels": [ "misp:type=\"link\"", "misp:category=\"External analysis\"" ] }, { "type": "url", "spec_version": "2.1", "id": "url--5b58e3c5-2c90-4941-9b8f-479a02de0b81", "value": "https://www.symantec.com/blogs/threat-intelligence/leafminer-espionage-middle-east" }, { "type": "x-misp-attribute", "spec_version": "2.1", "id": "x-misp-attribute--5b58e3d9-bd80-43a1-a4c7-4f0702de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:53.000Z", "modified": "2018-07-25T20:55:53.000Z", "labels": [ "misp:type=\"text\"", "misp:category=\"External analysis\"" ], "x_misp_category": "External analysis", "x_misp_type": "text", "x_misp_value": "Symantec has uncovered the operations of a threat actor named Leafminer that is targeting a broad list of government organizations and business verticals in various regions in the Middle East since at least early 2017. The group tends to adapt publicly available techniques and tools for their attacks and experiments with published proof-of-concept exploits. Leafminer attempts to infiltrate target networks through various means of intrusion: watering hole websites, vulnerability scans of network services on the internet, and brute-force/dictionary login attempts. The actor\u00e2\u20ac\u2122s post-compromise toolkit suggests that the group is looking for email data, files, and database servers on compromised target systems." }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--b4137388-e6d6-4ad5-9279-cf94b064002a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:11.000Z", "modified": "2018-07-25T20:54:11.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--7e43aced-7d72-4b63-831b-c9fb69c79ec5", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:09.000Z", "modified": "2018-07-25T20:54:09.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--2fcc008b-3b14-4ba4-8b42-a7b810102a7c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:13.000Z", "modified": "2018-07-25T20:54:13.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--ad25b1d7-45f7-47ed-a474-a63310ffc5a7", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:12.000Z", "modified": "2018-07-25T20:54:12.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--40e176cd-33bf-428f-8dc7-e7eb0657ccc4", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:16.000Z", "modified": "2018-07-25T20:54:16.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--30652bda-a360-426f-89ae-f6257c566381", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:15.000Z", "modified": "2018-07-25T20:54:15.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--c8a57b71-f1b8-491b-91df-f591fcd2c841", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:21.000Z", "modified": "2018-07-25T20:54:21.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--922c585b-1cba-463b-9a0b-6b995bf2c886", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:21.000Z", "modified": "2018-07-25T20:54:21.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--4d4867f5-58bd-476d-bbb6-880d35895c1c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:26.000Z", "modified": "2018-07-25T20:54:26.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--910ea1f7-d0cf-4776-8d22-d14dbb5b0d3c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:26.000Z", "modified": "2018-07-25T20:54:26.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--44037150-0f77-4e34-9b1b-f932434486ea", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:32.000Z", "modified": "2018-07-25T20:54:32.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--1d1bbb27-8c0f-4c25-811b-e406e8056538", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:32.000Z", "modified": "2018-07-25T20:54:32.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--1bfe243a-d171-4eb6-b5a8-6f750ae94dd5", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:37.000Z", "modified": "2018-07-25T20:54:37.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--ca66551a-7048-493e-a8c4-23455d756628", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:37.000Z", "modified": "2018-07-25T20:54:37.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--d5bf8c36-3135-4442-8fa6-c8f7b46462dd", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:42.000Z", "modified": "2018-07-25T20:54:42.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--675a3865-7c5e-42bc-abf6-1051b955ca9a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:43.000Z", "modified": "2018-07-25T20:54:43.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--4ca44390-aea3-4649-b947-87e3382d214e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:48.000Z", "modified": "2018-07-25T20:54:48.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--27f2127a-9dd0-4d0d-b321-fa1c3e5a3abc", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:49.000Z", "modified": "2018-07-25T20:54:49.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--87c335c3-8aad-426d-9e25-50b8d69359bc", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:54.000Z", "modified": "2018-07-25T20:54:54.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--fa4c3080-e422-4c59-9329-fd4ad1fabae0", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:54:54.000Z", "modified": "2018-07-25T20:54:54.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--1d29953f-0ac9-4077-ae2c-78f16d033b15", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:00.000Z", "modified": "2018-07-25T20:55:00.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--712090b0-f46c-4bd2-9c47-1546ec19f1f7", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:00.000Z", "modified": "2018-07-25T20:55:00.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--efb30889-667b-4c76-b0ad-f26d45ab1aad", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:06.000Z", "modified": "2018-07-25T20:55:06.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--e1ce1e3e-6474-41ab-b48d-ec7fccfd8d1d", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:06.000Z", "modified": "2018-07-25T20:55:06.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--0c937616-7955-4a82-ad51-7343884f4b4a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:11.000Z", "modified": "2018-07-25T20:55:11.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--9a9a003c-ee07-4826-8ed5-801368161b7b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:11.000Z", "modified": "2018-07-25T20:55:11.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--65f0ff96-312c-4873-846a-15494be2de1e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:16.000Z", "modified": "2018-07-25T20:55:16.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--880f0101-1add-48aa-b31c-a93caa161553", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:17.000Z", "modified": "2018-07-25T20:55:17.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--b97ff240-fb02-48ac-a995-cfe470d09cb0", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:22.000Z", "modified": "2018-07-25T20:55:22.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--122569c6-a777-4b6d-b825-92590b0b85c8", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:22.000Z", "modified": "2018-07-25T20:55:22.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--1301207f-edce-4810-b7f6-00084264ce54", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:27.000Z", "modified": "2018-07-25T20:55:27.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--5048a4e7-752a-4639-93da-136abb92ce3b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:28.000Z", "modified": "2018-07-25T20:55:28.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--6e967f61-6604-4932-bd83-7e54a2862b86", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:33.000Z", "modified": "2018-07-25T20:55:33.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--1f3ec55a-7cd1-41d6-ad73-ea62a64a6efd", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:33.000Z", "modified": "2018-07-25T20:55:33.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--81ee6e30-8a76-4f90-a300-c1cc5375b3f6", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:40.000Z", "modified": "2018-07-25T20:55:40.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--6751acd9-30f4-4045-ae06-746005d73a99", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:40.000Z", "modified": "2018-07-25T20:55:40.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--3bd7d553-2d5d-44c9-83fb-bd5ff9ba553d", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:45.000Z", "modified": "2018-07-25T20:55:45.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--2a9bd36d-b91f-483d-8b2f-9a5dd2d56d4a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:45.000Z", "modified": "2018-07-25T20:55:45.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--c3416779-cdc1-49f7-bb9b-55eb69abf547", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:51.000Z", "modified": "2018-07-25T20:55:51.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--d26d5a46-004a-4da7-a1db-6d34c0a84d65", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:51.000Z", "modified": "2018-07-25T20:55:51.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--341215a7-a4f6-4c73-91c6-bce2fb47563e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:56.000Z", "modified": "2018-07-25T20:55:56.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--66670f5f-0a18-48fb-9fa8-8a0557dfe6d7", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:55:57.000Z", "modified": "2018-07-25T20:55:57.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--d3986e5a-1831-4613-9ded-a8bd4117673c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:03.000Z", "modified": "2018-07-25T20:56:03.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--c92a8a8b-12ca-42df-9edb-08a5e3cfa48c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:03.000Z", "modified": "2018-07-25T20:56:03.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--8bf0ce4c-f54d-442b-a9e4-92a693e079a8", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:08.000Z", "modified": "2018-07-25T20:56:08.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--23845d4a-e174-4592-bafd-a4ea6e7bda43", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:08.000Z", "modified": "2018-07-25T20:56:08.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--5bdc4683-2cc9-40c4-8a31-2b4d6b0f7688", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:14.000Z", "modified": "2018-07-25T20:56:14.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--6108bce3-e69a-4b39-82c3-39257a7cdb82", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:14.000Z", "modified": "2018-07-25T20:56:14.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--948044e2-5ce6-422b-944b-539b9512caf1", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:19.000Z", "modified": "2018-07-25T20:56:19.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--c854e3e3-b985-43bb-a4ce-691f06c5677d", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:20.000Z", "modified": "2018-07-25T20:56:20.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--1c646e8e-6ee8-4c11-8199-aa1060dc6b9e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:25.000Z", "modified": "2018-07-25T20:56:25.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--db181660-68fa-4e97-bf75-86295ba46f1d", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:25.000Z", "modified": "2018-07-25T20:56:25.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--af26c4fe-952f-482e-b1c7-64e8ec4587dd", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:31.000Z", "modified": "2018-07-25T20:56:31.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--3cc8e8c8-8a37-43dc-ad1b-a3fe8178a358", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:31.000Z", "modified": "2018-07-25T20:56:31.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--cb8c1f90-8fa5-40a3-9fa3-dc1415a2be70", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:36.000Z", "modified": "2018-07-25T20:56:36.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--37d37c7c-c665-4cc0-b7d2-75a5bae96999", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:36.000Z", "modified": "2018-07-25T20:56:36.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--2809ae6d-0f07-46c0-a476-dfeec3076b23", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:41.000Z", "modified": "2018-07-25T20:56:41.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--b1df06cf-64e3-4cf9-b7d0-7b7107d06abf", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:42.000Z", "modified": "2018-07-25T20:56:42.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--fd9e918c-a015-42aa-8c06-18d603937354", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:47.000Z", "modified": "2018-07-25T20:56:47.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--ca56de15-15e7-4dea-b035-1d253f952c52", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:47.000Z", "modified": "2018-07-25T20:56:47.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--2ab6ee33-dce7-4fe2-8fc1-9a352a6b58c7", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:53.000Z", "modified": "2018-07-25T20:56:53.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--d3dbfdd6-7eae-4dae-953b-6d8d56c6a82d", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:53.000Z", "modified": "2018-07-25T20:56:53.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--5e34ef7e-4080-4342-a2ed-a45eaa252537", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:56:58.000Z", "modified": "2018-07-25T20:56:58.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--e409b3d9-42dc-4f10-8b9a-ee88f8b8ad3f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:59:33.000Z", "modified": "2018-07-25T20:59:33.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--c3d921b7-e61e-4056-aa56-8d697f5768b8", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:59:39.000Z", "modified": "2018-07-25T20:59:39.000Z", "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"" ], "x_misp_meta_category": "file", "x_misp_name": "file" }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--464d3928-33d4-43f4-9685-3fdc23ba76a3", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-07-25T20:59:39.000Z", "modified": "2018-07-25T20:59:39.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b4725765-4a34-47cb-b1bc-a1c4fd356478", "created": "2018-07-25T20:59:42.000Z", "modified": "2018-07-25T20:59:42.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--b4137388-e6d6-4ad5-9279-cf94b064002a", "target_ref": "x-misp-object--7e43aced-7d72-4b63-831b-c9fb69c79ec5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5f41c313-3aa4-4e07-94ad-94dae7f57d32", "created": "2018-07-25T20:59:42.000Z", "modified": "2018-07-25T20:59:42.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--2fcc008b-3b14-4ba4-8b42-a7b810102a7c", "target_ref": "x-misp-object--ad25b1d7-45f7-47ed-a474-a63310ffc5a7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2211b75-da71-4bb7-9490-d8a60d59a0cf", "created": "2018-07-25T20:59:42.000Z", "modified": "2018-07-25T20:59:42.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--40e176cd-33bf-428f-8dc7-e7eb0657ccc4", "target_ref": "x-misp-object--30652bda-a360-426f-89ae-f6257c566381" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20797b17-9ced-4877-9531-88fe5fbb946c", "created": "2018-07-25T20:59:43.000Z", "modified": "2018-07-25T20:59:43.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--c8a57b71-f1b8-491b-91df-f591fcd2c841", "target_ref": "x-misp-object--922c585b-1cba-463b-9a0b-6b995bf2c886" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5e57d73-89b6-42fb-a592-1a0e0fdd7a98", "created": "2018-07-25T20:59:43.000Z", "modified": "2018-07-25T20:59:43.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--4d4867f5-58bd-476d-bbb6-880d35895c1c", "target_ref": "x-misp-object--910ea1f7-d0cf-4776-8d22-d14dbb5b0d3c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--736d1f3e-bbf5-4b0f-8bf3-73a176a88ae8", "created": "2018-07-25T20:59:43.000Z", "modified": "2018-07-25T20:59:43.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--44037150-0f77-4e34-9b1b-f932434486ea", "target_ref": "x-misp-object--1d1bbb27-8c0f-4c25-811b-e406e8056538" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d659da95-5f5a-4a45-a645-cc89c77b2d53", "created": "2018-07-25T20:59:43.000Z", "modified": "2018-07-25T20:59:43.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--1bfe243a-d171-4eb6-b5a8-6f750ae94dd5", "target_ref": "x-misp-object--ca66551a-7048-493e-a8c4-23455d756628" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c6f5bcb-12fd-4297-bf84-bf9560674769", "created": "2018-07-25T20:59:44.000Z", "modified": "2018-07-25T20:59:44.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--d5bf8c36-3135-4442-8fa6-c8f7b46462dd", "target_ref": "x-misp-object--675a3865-7c5e-42bc-abf6-1051b955ca9a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--581a45cb-265c-40e2-932c-d5b94b1b47bb", "created": "2018-07-25T20:59:44.000Z", "modified": "2018-07-25T20:59:44.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--4ca44390-aea3-4649-b947-87e3382d214e", "target_ref": "x-misp-object--27f2127a-9dd0-4d0d-b321-fa1c3e5a3abc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1d43f7f-cc51-4d71-bda2-3ab795dd2350", "created": "2018-07-25T20:59:44.000Z", "modified": "2018-07-25T20:59:44.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--87c335c3-8aad-426d-9e25-50b8d69359bc", "target_ref": "x-misp-object--fa4c3080-e422-4c59-9329-fd4ad1fabae0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc866114-77c4-4cf9-a681-67b24a31484e", "created": "2018-07-25T20:59:44.000Z", "modified": "2018-07-25T20:59:44.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--1d29953f-0ac9-4077-ae2c-78f16d033b15", "target_ref": "x-misp-object--712090b0-f46c-4bd2-9c47-1546ec19f1f7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--af976628-33ac-4287-9199-7bb0f3888d32", "created": "2018-07-25T20:59:44.000Z", "modified": "2018-07-25T20:59:44.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--efb30889-667b-4c76-b0ad-f26d45ab1aad", "target_ref": "x-misp-object--e1ce1e3e-6474-41ab-b48d-ec7fccfd8d1d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ddf0f4ba-ace9-4002-afa1-796ea71947e7", "created": "2018-07-25T20:59:45.000Z", "modified": "2018-07-25T20:59:45.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--0c937616-7955-4a82-ad51-7343884f4b4a", "target_ref": "x-misp-object--9a9a003c-ee07-4826-8ed5-801368161b7b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08c950e1-8aa4-4ca7-bbea-ac3bd5ea9cbe", "created": "2018-07-25T20:59:45.000Z", "modified": "2018-07-25T20:59:45.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--65f0ff96-312c-4873-846a-15494be2de1e", "target_ref": "x-misp-object--880f0101-1add-48aa-b31c-a93caa161553" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b3ddaadb-1467-414a-8d99-deb3825a0ef6", "created": "2018-07-25T20:59:45.000Z", "modified": "2018-07-25T20:59:45.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--b97ff240-fb02-48ac-a995-cfe470d09cb0", "target_ref": "x-misp-object--122569c6-a777-4b6d-b825-92590b0b85c8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cf497cf3-60ba-429e-a0d5-67f877fe1400", "created": "2018-07-25T20:59:46.000Z", "modified": "2018-07-25T20:59:46.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--1301207f-edce-4810-b7f6-00084264ce54", "target_ref": "x-misp-object--5048a4e7-752a-4639-93da-136abb92ce3b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6828660c-aca9-4652-b65f-c4c0af43a127", "created": "2018-07-25T20:59:47.000Z", "modified": "2018-07-25T20:59:47.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--6e967f61-6604-4932-bd83-7e54a2862b86", "target_ref": "x-misp-object--1f3ec55a-7cd1-41d6-ad73-ea62a64a6efd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1330f00b-4d22-4721-ac5b-9ab410113513", "created": "2018-07-25T20:59:47.000Z", "modified": "2018-07-25T20:59:47.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--81ee6e30-8a76-4f90-a300-c1cc5375b3f6", "target_ref": "x-misp-object--6751acd9-30f4-4045-ae06-746005d73a99" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--476e4b37-c936-4720-b1f5-2b1702588e5f", "created": "2018-07-25T20:59:47.000Z", "modified": "2018-07-25T20:59:47.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--3bd7d553-2d5d-44c9-83fb-bd5ff9ba553d", "target_ref": "x-misp-object--2a9bd36d-b91f-483d-8b2f-9a5dd2d56d4a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--76ea30a3-0c81-4da5-aeb8-9fd0c41402a7", "created": "2018-07-25T20:59:48.000Z", "modified": "2018-07-25T20:59:48.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--c3416779-cdc1-49f7-bb9b-55eb69abf547", "target_ref": "x-misp-object--d26d5a46-004a-4da7-a1db-6d34c0a84d65" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d6f38167-2b05-42a5-b775-4e212b723b1a", "created": "2018-07-25T20:59:48.000Z", "modified": "2018-07-25T20:59:48.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--341215a7-a4f6-4c73-91c6-bce2fb47563e", "target_ref": "x-misp-object--66670f5f-0a18-48fb-9fa8-8a0557dfe6d7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--264d7441-c745-469e-a85e-d620c901cccc", "created": "2018-07-25T20:59:48.000Z", "modified": "2018-07-25T20:59:48.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--d3986e5a-1831-4613-9ded-a8bd4117673c", "target_ref": "x-misp-object--c92a8a8b-12ca-42df-9edb-08a5e3cfa48c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6191fb20-2f5b-4ca1-9c00-79c1aef5400b", "created": "2018-07-25T20:59:48.000Z", "modified": "2018-07-25T20:59:48.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--8bf0ce4c-f54d-442b-a9e4-92a693e079a8", "target_ref": "x-misp-object--23845d4a-e174-4592-bafd-a4ea6e7bda43" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0726b967-60e8-4585-b702-57541d54f3db", "created": "2018-07-25T20:59:48.000Z", "modified": "2018-07-25T20:59:48.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--5bdc4683-2cc9-40c4-8a31-2b4d6b0f7688", "target_ref": "x-misp-object--6108bce3-e69a-4b39-82c3-39257a7cdb82" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4ad9dcab-701c-4e5b-b924-bac726a543a4", "created": "2018-07-25T20:59:49.000Z", "modified": "2018-07-25T20:59:49.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--948044e2-5ce6-422b-944b-539b9512caf1", "target_ref": "x-misp-object--c854e3e3-b985-43bb-a4ce-691f06c5677d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d3b2bb5a-0f0c-4d5f-9140-5a8948def49a", "created": "2018-07-25T20:59:49.000Z", "modified": "2018-07-25T20:59:49.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--1c646e8e-6ee8-4c11-8199-aa1060dc6b9e", "target_ref": "x-misp-object--db181660-68fa-4e97-bf75-86295ba46f1d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d45223b0-01f5-497b-8e2d-bfe950153ba6", "created": "2018-07-25T20:59:49.000Z", "modified": "2018-07-25T20:59:49.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--af26c4fe-952f-482e-b1c7-64e8ec4587dd", "target_ref": "x-misp-object--3cc8e8c8-8a37-43dc-ad1b-a3fe8178a358" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4ead61ff-437c-4126-92c8-73bfd82fb917", "created": "2018-07-25T20:59:49.000Z", "modified": "2018-07-25T20:59:49.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--cb8c1f90-8fa5-40a3-9fa3-dc1415a2be70", "target_ref": "x-misp-object--37d37c7c-c665-4cc0-b7d2-75a5bae96999" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8aaf4ba2-0061-4bdd-a91f-2b89f67e51b6", "created": "2018-07-25T20:59:50.000Z", "modified": "2018-07-25T20:59:50.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--2809ae6d-0f07-46c0-a476-dfeec3076b23", "target_ref": "x-misp-object--b1df06cf-64e3-4cf9-b7d0-7b7107d06abf" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7b15fc5a-e994-4efd-980c-9cdc0dc354ec", "created": "2018-07-25T20:59:50.000Z", "modified": "2018-07-25T20:59:50.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--fd9e918c-a015-42aa-8c06-18d603937354", "target_ref": "x-misp-object--ca56de15-15e7-4dea-b035-1d253f952c52" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e0e050e5-20ba-4fae-ab32-6d2bbc1faba5", "created": "2018-07-25T20:59:50.000Z", "modified": "2018-07-25T20:59:50.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--2ab6ee33-dce7-4fe2-8fc1-9a352a6b58c7", "target_ref": "x-misp-object--d3dbfdd6-7eae-4dae-953b-6d8d56c6a82d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6814ae0d-22d9-491a-8168-1f50af4b3a1e", "created": "2018-07-25T20:59:50.000Z", "modified": "2018-07-25T20:59:50.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--5e34ef7e-4080-4342-a2ed-a45eaa252537", "target_ref": "x-misp-object--e409b3d9-42dc-4f10-8b9a-ee88f8b8ad3f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--72b0ec38-8d63-40c1-b086-97daf5457265", "created": "2018-07-25T20:59:50.000Z", "modified": "2018-07-25T20:59:50.000Z", "relationship_type": "analysed-with", "source_ref": "x-misp-object--c3d921b7-e61e-4056-aa56-8d697f5768b8", "target_ref": "x-misp-object--464d3928-33d4-43f4-9685-3fdc23ba76a3" }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } } ] }