{
    "type": "bundle",
    "id": "bundle--57f239a3-9ac0-4261-8678-73f0950d210f",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T13:20:04.000Z",
            "modified": "2016-10-03T13:20:04.000Z",
            "name": "CIRCL",
            "identity_class": "organization"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--57f239a3-9ac0-4261-8678-73f0950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T13:20:04.000Z",
            "modified": "2016-10-03T13:20:04.000Z",
            "name": "Malspam 2016-10-03 (.xls) - campaign: \"[Scan]\"",
            "published": "2016-10-03T15:05:01Z",
            "object_refs": [
                "indicator--57f239b3-f598-4937-8ce8-ef38950d210f",
                "indicator--57f239b4-da1c-4ae7-bc49-ef38950d210f",
                "indicator--57f239b4-56bc-437c-9ef0-ef38950d210f",
                "indicator--57f239b4-fb34-4eb1-90c1-ef38950d210f",
                "indicator--57f239b4-3214-449d-bc43-ef38950d210f",
                "indicator--57f239b5-88e4-43c5-82b2-ef38950d210f",
                "indicator--57f239b5-af9c-4e71-82da-ef38950d210f",
                "indicator--57f239b5-b614-4c95-b880-ef38950d210f",
                "indicator--57f239b5-de0c-4cbf-945a-ef38950d210f",
                "indicator--57f239b5-20dc-4c78-bd5e-ef38950d210f",
                "indicator--57f239b6-5e54-4592-96b7-ef38950d210f",
                "indicator--57f239b6-5214-4557-a34d-ef38950d210f",
                "indicator--57f239b6-5114-46be-ba1a-ef38950d210f",
                "indicator--57f239b6-8310-4692-8276-ef38950d210f",
                "indicator--57f239b7-40bc-4494-81c1-ef38950d210f",
                "indicator--57f239b7-f428-4f3a-91f9-ef38950d210f",
                "indicator--57f25259-adac-4f62-874a-73ea950d210f",
                "indicator--57f25293-13c4-46e9-bb76-e444950d210f",
                "indicator--57f2527d-c534-4925-bca3-4376950d210f",
                "indicator--57f252ac-31a8-45e6-a291-73ea950d210f"
            ],
            "labels": [
                "Threat-Report",
                "misp:tool=\"MISP-STIX-Converter\"",
                "circl:incident-classification=\"malware\""
            ],
            "object_marking_refs": [
                "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b3-f598-4937-8ce8-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:55.000Z",
            "modified": "2016-10-03T10:57:55.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '162.253.225.88']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b4-da1c-4ae7-bc49-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:56.000Z",
            "modified": "2016-10-03T10:57:56.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '68.65.120.207']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b4-56bc-437c-9ef0-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:56.000Z",
            "modified": "2016-10-03T10:57:56.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '77.79.239.195']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b4-fb34-4eb1-90c1-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:56.000Z",
            "modified": "2016-10-03T10:57:56.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '96.0.130.2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b4-3214-449d-bc43-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:56.000Z",
            "modified": "2016-10-03T10:57:56.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'bluewaterappco.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b5-88e4-43c5-82b2-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:57.000Z",
            "modified": "2016-10-03T10:57:57.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'boservice.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b5-af9c-4e71-82da-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:57.000Z",
            "modified": "2016-10-03T10:57:57.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'cedrussauna.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b5-b614-4c95-b880-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:57.000Z",
            "modified": "2016-10-03T10:57:57.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'far-infraredsaunas.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b5-de0c-4cbf-945a-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:57.000Z",
            "modified": "2016-10-03T10:57:57.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'golfnauvoo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b5-20dc-4c78-bd5e-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:57.000Z",
            "modified": "2016-10-03T10:57:57.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://bluewaterappco.com/jhg45s']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b6-5e54-4592-96b7-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:58.000Z",
            "modified": "2016-10-03T10:57:58.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://boservice.info/jhg45s']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b6-5214-4557-a34d-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:58.000Z",
            "modified": "2016-10-03T10:57:58.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://cedrussauna.com/jhg45s']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b6-5114-46be-ba1a-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:58.000Z",
            "modified": "2016-10-03T10:57:58.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://far-infraredsaunas.com/jhg45s']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b6-8310-4692-8276-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:58.000Z",
            "modified": "2016-10-03T10:57:58.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://golfnauvoo.com/jhg45s']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b7-40bc-4494-81c1-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:59.000Z",
            "modified": "2016-10-03T10:57:59.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://mmm2.aaomg.com/jhg45s']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f239b7-f428-4f3a-91f9-ef38950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T10:57:59.000Z",
            "modified": "2016-10-03T10:57:59.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'mmm2.aaomg.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T10:57:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f25259-adac-4f62-874a-73ea950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T13:19:57.000Z",
            "modified": "2016-10-03T13:19:57.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://foe-2.com/jhg45s']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T13:19:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f25293-13c4-46e9-bb76-e444950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T13:19:54.000Z",
            "modified": "2016-10-03T13:19:54.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://icdsarch.com/jhg45s']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T13:19:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f2527d-c534-4925-bca3-4376950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T13:20:00.000Z",
            "modified": "2016-10-03T13:20:00.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://inmopromo.com/jhg45s']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T13:20:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57f252ac-31a8-45e6-a291-73ea950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-10-03T13:20:04.000Z",
            "modified": "2016-10-03T13:20:04.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://denvertracy.com/jhg45s']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-10-03T13:20:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "marking-definition",
            "spec_version": "2.1",
            "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
            "created": "2017-01-20T00:00:00.000Z",
            "definition_type": "tlp",
            "name": "TLP:WHITE",
            "definition": {
                "tlp": "white"
            }
        }
    ]
}