{
    "type": "bundle",
    "id": "bundle--57cd5a06-59e0-44a8-9200-3306950d210f",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-05T11:49:59.000Z",
            "modified": "2016-09-05T11:49:59.000Z",
            "name": "CIRCL",
            "identity_class": "organization"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--57cd5a06-59e0-44a8-9200-3306950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-05T11:49:59.000Z",
            "modified": "2016-09-05T11:49:59.000Z",
            "name": "Malspam 2016-09-05 (.js in .zip) - campaign: \"Credit card receipt\"",
            "published": "2016-09-05T11:50:39Z",
            "object_refs": [
                "indicator--57cd5bb7-b798-4b79-95c3-48a8950d210f",
                "indicator--57cd5bb7-9e68-48cf-a3eb-4f6e950d210f",
                "indicator--57cd5bb7-953c-4c3a-8e38-4d26950d210f",
                "indicator--57cd5bb8-ae0c-470b-8673-4818950d210f",
                "indicator--57cd5bb8-c47c-4071-90c8-445c950d210f",
                "indicator--57cd5bb8-26bc-4ef9-8ad2-4d45950d210f",
                "indicator--57cd5bb8-783c-4507-815a-4488950d210f",
                "indicator--57cd5bb9-0d4c-4ee1-accb-418a950d210f",
                "indicator--57cd5be7-66c8-476d-bbb9-4c0a950d210f",
                "indicator--57cd5be7-37f8-4b36-a89a-4af9950d210f"
            ],
            "labels": [
                "Threat-Report",
                "misp:tool=\"MISP-STIX-Converter\"",
                "circl:incident-classification=\"malware\""
            ],
            "object_marking_refs": [
                "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57cd5bb7-b798-4b79-95c3-48a8950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-05T11:49:11.000Z",
            "modified": "2016-09-05T11:49:11.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://canonsupervideo4k.ws/1bcpr7xx']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-05T11:49:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57cd5bb7-9e68-48cf-a3eb-4f6e950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-05T11:49:11.000Z",
            "modified": "2016-09-05T11:49:11.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'canonsupervideo4k.ws']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-05T11:49:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57cd5bb7-953c-4c3a-8e38-4d26950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-05T11:49:11.000Z",
            "modified": "2016-09-05T11:49:11.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '107.173.176.4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-05T11:49:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57cd5bb8-ae0c-470b-8673-4818950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-05T11:49:12.000Z",
            "modified": "2016-09-05T11:49:12.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://darkestzone2.wang/1i0i75gq']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-05T11:49:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57cd5bb8-c47c-4071-90c8-445c950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-05T11:49:12.000Z",
            "modified": "2016-09-05T11:49:12.000Z",
            "description": "download location",
            "pattern": "[file:name = 'darkestzone2.wang']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-05T11:49:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57cd5bb8-26bc-4ef9-8ad2-4d45950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-05T11:49:12.000Z",
            "modified": "2016-09-05T11:49:12.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://tradesmartcoin.xyz/3o8pon']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-05T11:49:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57cd5bb8-783c-4507-815a-4488950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-05T11:49:12.000Z",
            "modified": "2016-09-05T11:49:12.000Z",
            "description": "download location",
            "pattern": "[file:name = 'tradesmartcoin.xyz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-05T11:49:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"filename\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57cd5bb9-0d4c-4ee1-accb-418a950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-05T11:49:13.000Z",
            "modified": "2016-09-05T11:49:13.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '216.126.225.159']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-05T11:49:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57cd5be7-66c8-476d-bbb9-4c0a950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-05T11:49:59.000Z",
            "modified": "2016-09-05T11:49:59.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'listofbuyersus.co.in']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-05T11:49:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57cd5be7-37f8-4b36-a89a-4af9950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-05T11:49:59.000Z",
            "modified": "2016-09-05T11:49:59.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'videoconvertermac.in']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-05T11:49:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "marking-definition",
            "spec_version": "2.1",
            "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
            "created": "2017-01-20T00:00:00.000Z",
            "definition_type": "tlp",
            "name": "TLP:WHITE",
            "definition": {
                "tlp": "white"
            }
        }
    ]
}