{ "type": "bundle", "id": "bundle--5b746d63-8c10-46b5-8c1a-49ec02de0b81", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:37:14.000Z", "modified": "2018-08-15T18:37:14.000Z", "name": "CIRCL", "identity_class": "organization" }, { "type": "report", "spec_version": "2.1", "id": "report--5b746d63-8c10-46b5-8c1a-49ec02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:37:14.000Z", "modified": "2018-08-15T18:37:14.000Z", "name": "OSINT - \u00e8\u201a\u0161\u00e8\u201e\u2018\u00e8\u2122\u00ab\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00ef\u00bc\u02c6APT-C-35\u00ef\u00bc\u2030\u00e7\u00a7\u00bb\u00e5\u0160\u00a8\u00e7\u00ab\u00af\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e6\u00b4\u00bb\u00e5\u0160\u00a8\u00e6\u008f\u00ad\u00e9\u0153\u00b2", "published": "2018-08-15T18:37:22Z", "object_refs": [ "observed-data--5b746da4-59a8-4ef5-80df-d1f902de0b81", "url--5b746da4-59a8-4ef5-80df-d1f902de0b81", "x-misp-attribute--5b746dc1-7888-45bd-8cc2-44c102de0b81", "indicator--5b746e03-43d4-4b3b-86ba-4a5002de0b81", "indicator--5b746e04-c9e0-4a22-a659-46e402de0b81", "indicator--5b746e04-7310-4d3f-a486-490e02de0b81", "indicator--5b746e05-1a38-46f6-bb9a-4a1c02de0b81", "indicator--5b746e05-43b8-4199-8f50-40b002de0b81", "indicator--5b746e05-e1a8-421d-998a-496502de0b81", "indicator--5b746e06-b2fc-4514-b893-443d02de0b81", "indicator--5b746e06-7868-4079-b200-417602de0b81", "indicator--5b746e07-be70-4961-8ea9-452d02de0b81", "indicator--5b746e07-fcc0-4802-9062-425102de0b81", "indicator--5b746e07-b26c-4a13-ad6b-4e1a02de0b81", "indicator--5b746e08-1ec8-42b3-a0ad-481f02de0b81", "indicator--5b746e08-a2b4-487b-90cf-4d5e02de0b81", "indicator--5b746e09-7cfc-4df6-96f3-450602de0b81", "indicator--5b746e09-b750-4f9f-ba62-4e3c02de0b81", "indicator--5b746e0a-77cc-41f9-8731-4fc202de0b81", "indicator--5b746e0a-0428-4b49-9a3f-4d5102de0b81", "indicator--5b746e0b-6f64-4b38-b926-495702de0b81", "indicator--5b746e0b-3868-4c5a-bf11-4ec202de0b81", "indicator--5b746e0c-2494-4fdf-ae99-405702de0b81", "indicator--5b746e0c-1efc-4744-8e16-470a02de0b81", "indicator--5b746e2c-1fc4-40d0-943c-e0ae02de0b81", "indicator--5b746e2d-b2d8-4d82-9e6e-e0ae02de0b81", "indicator--5b746e2d-6834-481c-a42a-e0ae02de0b81", "indicator--5b746e2e-1298-49ca-a655-e0ae02de0b81", "indicator--5b746e2e-2a38-478c-811d-e0ae02de0b81", "indicator--5b746e2e-400c-4a5e-9bec-e0ae02de0b81", "indicator--5b746e2f-8f90-4a76-8a3c-e0ae02de0b81", "indicator--5b746e2f-6e34-462c-8646-e0ae02de0b81", "indicator--ca5d681d-33b4-4ec9-96e6-febd3f3a722b", "x-misp-object--117215e1-1d52-4fff-bc8d-0979cfbd51cf", "indicator--47daea83-d20e-4064-98ff-6a61429bb3f5", "x-misp-object--a8f72315-ebf8-49de-94f3-af53b9fbaa1e", "indicator--0fe484c0-2241-4fc9-bafd-df712f86aca3", "x-misp-object--1d42a1e0-62cc-4174-ac95-49f920e761e2", "indicator--391b876f-a4d1-4c80-93fc-554a2f6ad26c", "x-misp-object--a84adc75-9c11-49db-955f-fcd79e35c28c", "indicator--86dd19f6-a9c7-4fd5-a786-77d48d01e0e4", "x-misp-object--a3a0e935-7112-4262-bd49-cd81bc50a57b", "indicator--23283183-68d7-4a71-9e9e-33939bcdfda3", "x-misp-object--1be51f84-f11e-4e3b-ac1c-da2c2267e28e", "indicator--a56bcd41-6085-4433-bb14-785ac0e793ea", "x-misp-object--06e41e77-daaa-4e37-9863-7e2fe891d6b2", "indicator--4b7183d5-3eab-43dd-a70e-22c3a1967bb8", "x-misp-object--e2419d00-69a3-4e6e-b87e-ec8223a7b5cd", "indicator--ac5e2802-01b5-42a2-a4d7-d1bbbfbe144f", "x-misp-object--e0e980d2-9731-44db-8ccc-921e023bf9e7", "indicator--3630e203-611d-460f-8f70-b44344d5409f", "x-misp-object--4bfff4ec-7aac-4e69-8cac-a90fcfc0130f", "indicator--91cf78e9-e36d-4ccc-af1f-485a4b238560", "x-misp-object--196992e9-5607-4028-b60c-5a22b5839dde", "indicator--a47107f2-a312-40fb-8f78-8b905fa6681d", "x-misp-object--928814bd-64d5-4ecd-bc5f-655ebf15c21a", "indicator--7b1d01d7-f361-413f-91ad-f0d37a870129", "x-misp-object--ffc57365-4cf2-41a6-81f8-3573432a09af", "indicator--162c438c-69f6-4b5e-8e4c-b4f75ed40df4", "x-misp-object--da852be4-9cb2-4bac-a6a5-030bc914e630", "indicator--9a5fabe2-1e0b-4cc5-b0e9-365772adee52", "x-misp-object--bf3e97e8-306a-44e9-91b4-0c274ad51734", "indicator--c760affd-636c-478d-ba6a-a3749a64b781", "x-misp-object--ba15ef40-6ac2-487c-940e-83c3174da083", "indicator--e2e80668-791c-4d9a-80d4-dd25ba800c57", "x-misp-object--28caf2ea-f4fe-4f30-8fa5-4a1ed8b06e46", "indicator--fe9c1e41-f204-4e12-a71c-02f86c3046ae", "x-misp-object--36e12367-4a2f-4c7e-9857-05cbda8aa0be", "indicator--0610b8d6-dd83-4b25-a77a-83003ffd0e11", "x-misp-object--efc8b853-d469-4274-9070-ab6c9da8f164", "indicator--60193ac5-f0d1-42b3-83ac-3261849cd66b", "x-misp-object--836bbef9-5015-4e6e-b2a7-2a09752ddd57", "relationship--31a6d400-6ffc-4dff-9aea-2dfef8783a43", "relationship--50acfd39-9501-4f31-a41e-d0391d23a3e7", "relationship--82bd3b4c-3ece-4be3-9409-1de6867bfd5f", "relationship--5ce468b0-854b-4f73-87ed-dc8458f23edd", "relationship--51e2131a-2255-4a62-94f9-c481339e8a90", "relationship--0030f751-58cd-4bf6-ac81-504212a12e55", "relationship--3ab5f78f-11a8-4026-b15f-6b11045020c3", "relationship--0550ab49-b0db-47e1-8ccd-47bc40c105d3", "relationship--50596ec8-5e13-4070-ac00-8388f7642094", "relationship--5a76ec13-2849-4c3b-8156-6cea5dffd730", "relationship--2d156ce6-e4a7-4328-9532-b39d1f8746c1", "relationship--c7085d9e-73c6-460e-a94a-01dee82cdc39", "relationship--5634e793-1809-436e-a970-6033cafd3f98", "relationship--ec603621-4792-444d-a633-12c974d76eeb", "relationship--3c3d2b7d-4ea6-4480-b8ed-ac005932d3c5", "relationship--d5c6b030-11fb-414d-8402-1c0cb3ec4f73", "relationship--a10674fe-1f77-4b6e-baf0-d18a9c82bc6e", "relationship--12a0e54b-9b55-46fc-a585-57da328f4165", "relationship--2e6df163-3dc7-4f7a-8780-c5841762d0ba", "relationship--ec985f4d-7b2c-4859-b021-940c6758718e" ], "labels": [ "Threat-Report", "misp:tool=\"MISP-STIX-Converter\"", "misp-galaxy:threat-actor=\"APT-C-35\"" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "observed-data", "spec_version": "2.1", "id": "observed-data--5b746da4-59a8-4ef5-80df-d1f902de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:15:00.000Z", "modified": "2018-08-15T18:15:00.000Z", "first_observed": "2018-08-15T18:15:00Z", "last_observed": "2018-08-15T18:15:00Z", "number_observed": 1, "object_refs": [ "url--5b746da4-59a8-4ef5-80df-d1f902de0b81" ], "labels": [ "misp:type=\"link\"", "misp:category=\"External analysis\"" ] }, { "type": "url", "spec_version": "2.1", "id": "url--5b746da4-59a8-4ef5-80df-d1f902de0b81", "value": "https://ti.360.net/blog/articles/analysis-of-donot-andriod-sample/" }, { "type": "x-misp-attribute", "spec_version": "2.1", "id": "x-misp-attribute--5b746dc1-7888-45bd-8cc2-44c102de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:15:29.000Z", "modified": "2018-08-15T18:15:29.000Z", "labels": [ "misp:type=\"text\"", "misp:category=\"External analysis\"" ], "x_misp_category": "External analysis", "x_misp_type": "text", "x_misp_value": "\u00e4\u00bc\u00a0\u00e7\u00bb\u0178\u00e7\u0161\u201eAPT\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e4\u00b8\u00bb\u00e8\u00a6\u0081\u00e6\u02dc\u00af\u00e9\u2019\u02c6\u00e5\u00af\u00b9PC\u00e7\u00ab\u00af\u00e8\u00bf\u203a\u00e8\u00a1\u0152\u00ef\u00bc\u0152\u00e8\u20ac\u0152\u00e9\u0161\u008f\u00e7\u009d\u20ac\u00e6\u2122\u00ba\u00e8\u0192\u00bd\u00e6\u2030\u2039\u00e6\u0153\u00ba\u00e5\u2019\u0152\u00e7\u00a7\u00bb\u00e5\u0160\u00a8\u00e7\u00bd\u2018\u00e7\u00bb\u0153\u00e5\u0153\u00a8\u00e4\u00b8\u2013\u00e7\u2022\u0152\u00e8\u0152\u0192\u00e5\u203a\u00b4\u00e5\u2020\u2026\u00e7\u0161\u201e\u00e6\u2122\u00ae\u00e5\u008f\u0160\u00e5\u008f\u2018\u00e5\u00b1\u2022\u00ef\u00bc\u0152\u00e8\u00b6\u0160\u00e6\u009d\u00a5\u00e8\u00b6\u0160\u00e5\u00a4\u0161\u00e9\u00bb\u2018\u00e5\u00ae\u00a2\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00e7\u0161\u201e\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e7\u203a\u00ae\u00e6\u00a0\u2021\u00e4\u00b9\u0178\u00e8\u00bf\u2026\u00e9\u20ac\u0178\u00e8\u201d\u201c\u00e5\u00bb\u00b6\u00e5\u02c6\u00b0\u00e7\u00a7\u00bb\u00e5\u0160\u00a8\u00e7\u00ab\u00af\u00ef\u00bc\u0152\u00e7\u201d\u0161\u00e8\u2021\u00b3\u00e5\u2021\u00ba\u00e7\u017d\u00b0\u00e5\u2021\u00ba\u00e5\u2019\u0152PC\u00e7\u00ab\u00af\u00e7\u00bb\u201c\u00e5\u0090\u02c6\u00e7\u0161\u201e\u00e8\u00b6\u2039\u00e5\u0160\u00bf\u00e3\u20ac\u201a\u00e8\u00bf\u2018\u00e5\u2021\u00a0\u00e5\u00b9\u00b4\u00e8\u00a2\u00ab\u00e5\u203a\u00bd\u00e5\u2020\u2026\u00e5\u00a4\u2013\u00e5\u00ae\u2030\u00e5\u2026\u00a8\u00e5\u017d\u201a\u00e5\u2022\u2020\u00e9\u2122\u2020\u00e7\u00bb\u00ad\u00e6\u0160\u00ab\u00e9\u0153\u00b2\u00e7\u0161\u201eFancy Bear\u00e3\u20ac\u0081Lazarus\u00e3\u20ac\u0081Operation Manul\u00e3\u20ac\u0081\u00e6\u2018\u00a9\u00e8\u00af\u0192\u00e8\u008d\u2030\u00e3\u20ac\u0081\u00e9\u00bb\u201e\u00e9\u2021\u2018\u00e9\u00bc\u00a0\u00e7\u00ad\u2030\u00e5\u00a4\u0161\u00e4\u00b8\u00aa\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00e6\u2014\u00a0\u00e7\u2013\u2018\u00e5\u008d\u00b0\u00e8\u00af\u0081\u00e4\u00ba\u2020\u00e8\u00bf\u2122\u00e7\u201a\u00b9\u00e3\u20ac\u201a\u00e8\u00bf\u2018\u00e6\u0153\u0178\u00ef\u00bc\u0152360\u00e7\u0192\u00bd\u00e7\u0081\u00ab\u00e5\u00ae\u017e\u00e9\u00aa\u0152\u00e5\u00ae\u00a4\u00e5\u008f\u2018\u00e7\u017d\u00b0\u00e8\u201a\u0161\u00e8\u201e\u2018\u00e8\u2122\u00ab\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00ef\u00bc\u02c6APT-C-35\u00ef\u00bc\u2030\u00e6\u0153\u20ac\u00e6\u2013\u00b0\u00e7\u0161\u201e\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e5\u00b7\u00b2\u00e6\u0160\u0160\u00e7\u00a7\u00bb\u00e5\u0160\u00a8\u00e7\u00ab\u00af\u00e4\u00b9\u0178\u00e5\u0160\u00a0\u00e5\u2026\u00a5\u00e5\u02c6\u00b0\u00e5\u2026\u00b6\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e7\u203a\u00ae\u00e6\u00a0\u2021\u00e4\u00b8\u00ad\u00e3\u20ac\u201a\r\n\r\n\u00e8\u201a\u0161\u00e8\u201e\u2018\u00e8\u2122\u00ab\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00ef\u00bc\u02c6APT-C-35, \u00e5\u0090\u017d\u00e6\u2013\u2021\u00e7\u00bb\u0178\u00e7\u00a7\u00b0\u00e8\u201a\u0161\u00e8\u201e\u2018\u00e8\u2122\u00ab\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00ef\u00bc\u2030\u00ef\u00bc\u0152\u00e5\u008f\u02c6\u00e7\u00a7\u00b0Donot\u00ef\u00bc\u0152\u00e6\u02dc\u00af\u00e4\u00b8\u20ac\u00e4\u00b8\u00aa\u00e9\u2019\u02c6\u00e5\u00af\u00b9\u00e5\u2026\u2039\u00e4\u00bb\u20ac\u00e7\u00b1\u00b3\u00e5\u00b0\u201d\u00e5\u0153\u00b0\u00e5\u0152\u00ba\u00e7\u203a\u00b8\u00e5\u2026\u00b3\u00e5\u203a\u00bd\u00e5\u00ae\u00b6\u00e7\u0161\u201e\u00e6\u201d\u00bf\u00e5\u00ba\u0153\u00e6\u0153\u00ba\u00e6\u017e\u201e\u00e7\u00ad\u2030\u00e9\u00a2\u2020\u00e5\u0178\u0178\u00e8\u00bf\u203a\u00e8\u00a1\u0152\u00e7\u00bd\u2018\u00e7\u00bb\u0153\u00e9\u2014\u00b4\u00e8\u00b0\u008d\u00e6\u00b4\u00bb\u00e5\u0160\u00a8\u00ef\u00bc\u0152\u00e4\u00bb\u00a5\u00e7\u00aa\u0192\u00e5\u008f\u2013\u00e6\u2022\u008f\u00e6\u201e\u0178\u00e4\u00bf\u00a1\u00e6\u0081\u00af\u00e4\u00b8\u00ba\u00e4\u00b8\u00bb\u00e7\u0161\u201e\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00e3\u20ac\u201a\u00e8\u00af\u00a5\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00e4\u00ba\u017d2017\u00e5\u00b9\u00b43\u00e6\u0153\u02c6\u00e7\u201d\u00b1360\u00e8\u00bf\u00bd\u00e6\u2014\u00a5\u00e5\u203a\u00a2\u00e9\u02dc\u0178\u00e9\u00a6\u2013\u00e6\u00ac\u00a1\u00e6\u203a\u009d\u00e5\u2026\u2030\u00ef\u00bc\u0152\u00e9\u0161\u008f\u00e5\u0090\u017d\u00e6\u0153\u2030\u00e6\u2022\u00b0\u00e4\u00b8\u00aa\u00e5\u203a\u00bd\u00e5\u2020\u2026\u00e5\u00a4\u2013\u00e5\u00ae\u2030\u00e5\u2026\u00a8\u00e5\u203a\u00a2\u00e9\u02dc\u0178\u00e6\u0152\u0081\u00e7\u00bb\u00ad\u00e8\u00bf\u00bd\u00e8\u00b8\u00aa\u00e5\u00b9\u00b6\u00e6\u0160\u00ab\u00e9\u0153\u00b2\u00e8\u00af\u00a5\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00e7\u0161\u201e\u00e6\u0153\u20ac\u00e6\u2013\u00b0\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e6\u00b4\u00bb\u00e5\u0160\u00a8\u00e3\u20ac\u201a\u00e8\u00a2\u00ab\u00e6\u203a\u009d\u00e5\u2026\u2030\u00e7\u0161\u201e\u00e7\u0161\u201e\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e6\u00b4\u00bb\u00e5\u0160\u00a8\u00e9\u0192\u00bd\u00e6\u02dc\u00af\u00e9\u2019\u02c6\u00e5\u00af\u00b9PC\u00e7\u00ab\u00af\u00e8\u00bf\u203a\u00e8\u00a1\u0152\u00ef\u00bc\u0152\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e6\u0153\u20ac\u00e6\u2014\u00a9\u00e5\u0153\u00a82016\u00e5\u00b9\u00b44\u00e6\u0153\u02c6\u00ef\u00bc\u0152\u00e8\u2021\u00b3\u00e4\u00bb\u0160\u00e6\u00b4\u00bb\u00e8\u00b7\u0192\u00ef\u00bc\u0152\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e6\u2013\u00b9\u00e5\u00bc\u008f\u00e4\u00b8\u00bb\u00e8\u00a6\u0081\u00e9\u2021\u2021\u00e7\u201d\u00a8\u00e9\u00b1\u00bc\u00e5\u008f\u2030\u00e9\u201a\u00ae\u00e4\u00bb\u00b6\u00e8\u00bf\u203a\u00e8\u00a1\u0152\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e3\u20ac\u201a2018\u00e5\u00b9\u00b48\u00e6\u0153\u02c6\u00ef\u00bc\u0152\u00e4\u00b8\u20ac\u00e6\u00ac\u00be\u00e4\u00bc\u00aa\u00e8\u00a3\u2026\u00e6\u02c6\u0090KNS Lite(\u00e5\u2026\u2039\u00e4\u00bb\u20ac\u00e7\u00b1\u00b3\u00e5\u00b0\u201d\u00e6\u2013\u00b0\u00e9\u2014\u00bb\u00e6\u0153\u008d\u00e5\u0160\u00a1)\u00e7\u00a7\u00bb\u00e5\u0160\u00a8\u00e7\u00ab\u00afRAT\u00e8\u00bf\u203a\u00e5\u2026\u00a5\u00e4\u00ba\u2020\u00e6\u02c6\u2018\u00e4\u00bb\u00ac\u00e7\u0161\u201e\u00e8\u00a7\u2020\u00e7\u00ba\u00bf\u00e3\u20ac\u201a\u00e9\u0161\u008f\u00e5\u0090\u017d\u00e6\u02c6\u2018\u00e4\u00bb\u00ac\u00e5\u008f\u2018\u00e7\u017d\u00b0\u00e5\u02c6\u00b0\u00e4\u00b8\u20ac\u00e6\u2030\u00b9\u00e5\u0090\u0152\u00e7\u00b1\u00bb\u00e7\u0161\u201e\u00e7\u00a7\u00bb\u00e5\u0160\u00a8\u00e7\u00ab\u00afRAT\u00ef\u00bc\u0152\u00e5\u00ae\u0192\u00e4\u00bb\u00ac\u00e6\u0153\u20ac\u00e6\u2014\u00a9\u00e5\u2021\u00ba\u00e7\u017d\u00b0\u00e4\u00ba\u017d2017\u00e5\u00b9\u00b47\u00e6\u0153\u02c6\u00ef\u00bc\u0152\u00e5\u0153\u00a82018\u00e5\u00b9\u00b4\u00e8\u00bf\u203a\u00e5\u2026\u00a5\u00e6\u00b4\u00bb\u00e8\u00b7\u0192\u00e6\u0153\u0178\u00e3\u20ac\u201a\u00e7\u00bb\u00bc\u00e5\u0090\u02c6\u00e6\u02c6\u2018\u00e4\u00bb\u00ac\u00e7\u0161\u201e\u00e8\u00b0\u0192\u00e6\u0178\u00a5\u00e6\u2022\u00b0\u00e6\u008d\u00ae\u00e5\u2019\u0152\u00e5\u00b7\u00b2\u00e7\u0178\u00a5\u00e7\u0161\u201e\u00e5\u2026\u00ac\u00e5\u00bc\u20ac\u00e6\u0192\u2026\u00e6\u0160\u00a5\u00ef\u00bc\u0152\u00e5\u008f\u00af\u00e4\u00bb\u00a5\u00e7\u00a1\u00ae\u00e8\u00ae\u00a4\u00e8\u00bf\u2122\u00e6\u02dc\u00af\u00e8\u201a\u0161\u00e8\u201e\u2018\u00e8\u2122\u00ab\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00e5\u008f\u2018\u00e8\u00b5\u00b7\u00e7\u0161\u201e\u00e4\u00b8\u20ac\u00e5\u0153\u00ba\u00e9\u2019\u02c6\u00e5\u00af\u00b9\u00e5\u2026\u2039\u00e4\u00bb\u20ac\u00e7\u00b1\u00b3\u00e5\u00b0\u201d\u00e5\u0153\u00b0\u00e5\u0152\u00ba\u00e7\u203a\u00b8\u00e5\u2026\u00b3\u00e5\u203a\u00bd\u00e5\u00ae\u00b6\u00ef\u00bc\u02c6\u00e5\u00b7\u00b4\u00e5\u0178\u00ba\u00e6\u2013\u00af\u00e5\u009d\u00a6\u00e5\u2019\u0152\u00e5\u008d\u00b0\u00e5\u00ba\u00a6\u00ef\u00bc\u2030\u00e7\u0161\u201e\u00e7\u00a7\u00bb\u00e5\u0160\u00a8\u00e7\u00ab\u00af\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e6\u00b4\u00bb\u00e5\u0160\u00a8\u00ef\u00bc\u0152\u00e8\u00af\u00a5\u00e6\u00b4\u00bb\u00e5\u0160\u00a8\u00e4\u00bb\u017d2017\u00e5\u00b9\u00b47\u00e6\u0153\u02c6\u00e6\u0152\u0081\u00e7\u00bb\u00ad\u00e8\u2021\u00b3\u00e4\u00bb\u0160\u00ef\u00bc\u0152\u00e9\u2021\u2021\u00e7\u201d\u00a8\u00e9\u2019\u201c\u00e9\u00b1\u00bc\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00ef\u00bc\u0152\u00e6\u017d\u00a8\u00e6\u00b5\u2039\u00e8\u00bf\u02dc\u00e6\u0153\u2030\u00e9\u201a\u00ae\u00e4\u00bb\u00b6\u00e6\u02c6\u2013\u00e8\u20ac\u2026\u00e7\u0178\u00ad\u00e4\u00bf\u00a1\u00e7\u0161\u201e\u00e9\u00b1\u00bc\u00e5\u008f\u2030\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e3\u20ac\u201a" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e03-43d4-4b3b-86ba-4a5002de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:35.000Z", "modified": "2018-08-15T18:16:35.000Z", "pattern": "[file:hashes.MD5 = '4efdbdcb3c341f86c4ff40764cd6468f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e04-c9e0-4a22-a659-46e402de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:36.000Z", "modified": "2018-08-15T18:16:36.000Z", "pattern": "[file:hashes.MD5 = '89b04c7e0b896a30d09a138b6bc3e828']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e04-7310-4d3f-a486-490e02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:36.000Z", "modified": "2018-08-15T18:16:36.000Z", "pattern": "[file:hashes.MD5 = 'a1827a948b5d14fb79c87e8d9ec74082']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e05-1a38-46f6-bb9a-4a1c02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:37.000Z", "modified": "2018-08-15T18:16:37.000Z", "pattern": "[file:hashes.MD5 = '7a2b1c70213ad493a053a1e252c00a54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:37Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e05-43b8-4199-8f50-40b002de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:37.000Z", "modified": "2018-08-15T18:16:37.000Z", "pattern": "[file:hashes.MD5 = 'fc385c0f00313ad3ba08576a28ca9b66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:37Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e05-e1a8-421d-998a-496502de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:37.000Z", "modified": "2018-08-15T18:16:37.000Z", "pattern": "[file:hashes.MD5 = '843e633b026c43b63b938effa4a36228']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:37Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e06-b2fc-4514-b893-443d02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:38.000Z", "modified": "2018-08-15T18:16:38.000Z", "pattern": "[file:hashes.MD5 = 'b7e6a740d8f1229142b5cebb1c22b8b1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e06-7868-4079-b200-417602de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:38.000Z", "modified": "2018-08-15T18:16:38.000Z", "pattern": "[file:hashes.MD5 = 'c2da8cc0725558304dfd2a59386373f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e07-be70-4961-8ea9-452d02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:39.000Z", "modified": "2018-08-15T18:16:39.000Z", "pattern": "[file:hashes.MD5 = '99ce8b2a17f7961a6b88ba0a7e037b5a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e07-fcc0-4802-9062-425102de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:39.000Z", "modified": "2018-08-15T18:16:39.000Z", "pattern": "[file:hashes.MD5 = '1b3693237173c8b7ee2942b69812eb47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e07-b26c-4a13-ad6b-4e1a02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:39.000Z", "modified": "2018-08-15T18:16:39.000Z", "pattern": "[file:hashes.MD5 = '7b00d9246335fd3fbb2cac2f2fe9354b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e08-1ec8-42b3-a0ad-481f02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:40.000Z", "modified": "2018-08-15T18:16:40.000Z", "pattern": "[file:hashes.MD5 = '2a1de3eefb43479bfbc53f677902c993']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:40Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e08-a2b4-487b-90cf-4d5e02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:40.000Z", "modified": "2018-08-15T18:16:40.000Z", "pattern": "[file:hashes.MD5 = '74aa0abb618f9b898aa293cdbd499a4b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:40Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e09-7cfc-4df6-96f3-450602de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:41.000Z", "modified": "2018-08-15T18:16:41.000Z", "pattern": "[file:hashes.MD5 = '92d79d7a27966ea4668e347fe9a97c62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:41Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e09-b750-4f9f-ba62-4e3c02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:41.000Z", "modified": "2018-08-15T18:16:41.000Z", "pattern": "[file:hashes.MD5 = 'ca9bc074668bb04552610ee835a0e9cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:41Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e0a-77cc-41f9-8731-4fc202de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:42.000Z", "modified": "2018-08-15T18:16:42.000Z", "pattern": "[file:hashes.MD5 = '28d30f19e96200bcf5067d5fd3b69439']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e0a-0428-4b49-9a3f-4d5102de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:42.000Z", "modified": "2018-08-15T18:16:42.000Z", "pattern": "[file:hashes.MD5 = 'be4117d154339e7469d7cbabf7d36dd1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e0b-6f64-4b38-b926-495702de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:43.000Z", "modified": "2018-08-15T18:16:43.000Z", "pattern": "[file:hashes.MD5 = '397ed4c4c372fe50588123d6885497c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e0b-3868-4c5a-bf11-4ec202de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:43.000Z", "modified": "2018-08-15T18:16:43.000Z", "pattern": "[file:hashes.MD5 = 'e5f774df501c631b0c14f3cf32e54dfb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e0c-2494-4fdf-ae99-405702de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:44.000Z", "modified": "2018-08-15T18:16:44.000Z", "pattern": "[file:hashes.MD5 = '47fc61cd1d939c99c000afe430451952']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e0c-1efc-4744-8e16-470a02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:16:44.000Z", "modified": "2018-08-15T18:16:44.000Z", "pattern": "[file:hashes.MD5 = 'e8b68543c78b3dc27c7951e1dc8fae89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:16:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e2c-1fc4-40d0-943c-e0ae02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:17:16.000Z", "modified": "2018-08-15T18:17:16.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '138.68.81.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:17:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e2d-b2d8-4d82-9e6e-e0ae02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:17:17.000Z", "modified": "2018-08-15T18:17:17.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '139.59.46.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:17:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e2d-6834-481c-a42a-e0ae02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:17:17.000Z", "modified": "2018-08-15T18:17:17.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '206.189.42.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:17:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e2e-1298-49ca-a655-e0ae02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:17:18.000Z", "modified": "2018-08-15T18:17:18.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.101.204.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:17:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e2e-2a38-478c-811d-e0ae02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:17:18.000Z", "modified": "2018-08-15T18:17:18.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '85.204.74.117']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:17:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e2e-400c-4a5e-9bec-e0ae02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:17:18.000Z", "modified": "2018-08-15T18:17:18.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.85.15.131']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:17:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e2f-8f90-4a76-8a3c-e0ae02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:17:19.000Z", "modified": "2018-08-15T18:17:19.000Z", "pattern": "[domain-name:value = 'godspeed.geekgalaxy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:17:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b746e2f-6e34-462c-8646-e0ae02de0b81", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:17:19.000Z", "modified": "2018-08-15T18:17:19.000Z", "pattern": "[domain-name:value = 'jasper.drivethrough.top']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:17:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ca5d681d-33b4-4ec9-96e6-febd3f3a722b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:20:48.000Z", "modified": "2018-08-15T18:20:48.000Z", "pattern": "[file:hashes.MD5 = '74aa0abb618f9b898aa293cdbd499a4b' AND file:hashes.SHA1 = 'e635e0bb63d555edf1f2ae52cb7747b616398542' AND file:hashes.SHA256 = '9ef7031c21675175d39c99e0afa32d9e1a99b53572ae014126bd8374ead4f708']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:20:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--117215e1-1d52-4fff-bc8d-0979cfbd51cf", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:20:46.000Z", "modified": "2018-08-15T18:20:46.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:45:03", "category": "Other", "uuid": "481821a5-e70b-492c-ac64-d73c570f07d5" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/9ef7031c21675175d39c99e0afa32d9e1a99b53572ae014126bd8374ead4f708/analysis/1534351503/", "category": "External analysis", "uuid": "8b02a5c1-b2ee-4d90-a8de-1ef179812ce0" }, { "type": "text", "object_relation": "detection-ratio", "value": "31/62", "category": "Other", "uuid": "d6a5ad70-713e-41c5-a05c-c27b70f1c45d" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--47daea83-d20e-4064-98ff-6a61429bb3f5", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:20:50.000Z", "modified": "2018-08-15T18:20:50.000Z", "pattern": "[file:hashes.MD5 = 'b7e6a740d8f1229142b5cebb1c22b8b1' AND file:hashes.SHA1 = 'a92b8fe659eb2178fa1dad174763851e497913cc' AND file:hashes.SHA256 = '89209624cd354749a520bff574eb1d1f73ef6f17727ccf530c6c3ab71e9408dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:20:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--a8f72315-ebf8-49de-94f3-af53b9fbaa1e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:20:49.000Z", "modified": "2018-08-15T18:20:49.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:22:09", "category": "Other", "uuid": "b6fcfd89-cc06-472b-94fc-9de3c5a0b7e8" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/89209624cd354749a520bff574eb1d1f73ef6f17727ccf530c6c3ab71e9408dc/analysis/1534350129/", "category": "External analysis", "uuid": "87ba62e2-a378-4b5a-9610-d7c97fee4d96" }, { "type": "text", "object_relation": "detection-ratio", "value": "28/61", "category": "Other", "uuid": "7c4eb019-2d78-40d5-8cb1-d5dd7fa03135" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0fe484c0-2241-4fc9-bafd-df712f86aca3", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:20:52.000Z", "modified": "2018-08-15T18:20:52.000Z", "pattern": "[file:hashes.MD5 = 'e5f774df501c631b0c14f3cf32e54dfb' AND file:hashes.SHA1 = '34f5f9bd5a58e65f08ca1ddf1d21546c85e0295a' AND file:hashes.SHA256 = '34a80b91dccc2f4c596238eb2a36082437d8ca2672184009ec8d0eaa5eefff4f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:20:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--1d42a1e0-62cc-4174-ac95-49f920e761e2", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:20:51.000Z", "modified": "2018-08-15T18:20:51.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:45:11", "category": "Other", "uuid": "82b270bc-9fd4-4cea-a518-be48e79e9041" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/34a80b91dccc2f4c596238eb2a36082437d8ca2672184009ec8d0eaa5eefff4f/analysis/1534351511/", "category": "External analysis", "uuid": "95968e47-0344-44b5-8289-90469171f852" }, { "type": "text", "object_relation": "detection-ratio", "value": "27/62", "category": "Other", "uuid": "85d7a948-df75-4ebc-be43-9e7b7e4ec4cc" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--391b876f-a4d1-4c80-93fc-554a2f6ad26c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:20:55.000Z", "modified": "2018-08-15T18:20:55.000Z", "pattern": "[file:hashes.MD5 = 'be4117d154339e7469d7cbabf7d36dd1' AND file:hashes.SHA1 = 'db313b03288827a7ecd3f6efe2e8ec7ff639e97b' AND file:hashes.SHA256 = 'f9a6a5e807c2567395f2f892058b80f2e47f022c80ee1a3608b7168f30187616']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:20:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--a84adc75-9c11-49db-955f-fcd79e35c28c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:20:53.000Z", "modified": "2018-08-15T18:20:53.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:45:08", "category": "Other", "uuid": "6bcc0295-4a44-4ca9-b734-b920be942866" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/f9a6a5e807c2567395f2f892058b80f2e47f022c80ee1a3608b7168f30187616/analysis/1534351508/", "category": "External analysis", "uuid": "32e51f7a-39dd-4e9b-8fa8-6baed62195d7" }, { "type": "text", "object_relation": "detection-ratio", "value": "36/62", "category": "Other", "uuid": "dca83336-2095-4204-b367-0ba1766db44f" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--86dd19f6-a9c7-4fd5-a786-77d48d01e0e4", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:20:57.000Z", "modified": "2018-08-15T18:20:57.000Z", "pattern": "[file:hashes.MD5 = 'a1827a948b5d14fb79c87e8d9ec74082' AND file:hashes.SHA1 = '083e28c7fa6ed1bbb054a93439ceee5c77c8f374' AND file:hashes.SHA256 = 'add1ca887148122425d16e308ac199739eab8862fbd66f86a647e5d4986b3fbd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:20:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--a3a0e935-7112-4262-bd49-cd81bc50a57b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:20:56.000Z", "modified": "2018-08-15T18:20:56.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:44:51", "category": "Other", "uuid": "c27129cd-d14b-4663-b8b4-edb763a587d1" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/add1ca887148122425d16e308ac199739eab8862fbd66f86a647e5d4986b3fbd/analysis/1534351491/", "category": "External analysis", "uuid": "14436061-95a8-40ad-8813-d849e76221f8" }, { "type": "text", "object_relation": "detection-ratio", "value": "35/62", "category": "Other", "uuid": "9adf50fb-0912-4c2f-91d6-56ab1281aabe" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--23283183-68d7-4a71-9e9e-33939bcdfda3", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:00.000Z", "modified": "2018-08-15T18:21:00.000Z", "pattern": "[file:hashes.MD5 = '2a1de3eefb43479bfbc53f677902c993' AND file:hashes.SHA1 = '9f24a7386d0db814bacd304e39be922c736339d5' AND file:hashes.SHA256 = '2295dc79778c05ddb4e7518499075e886f8715429160af103cc928cb1880affb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--1be51f84-f11e-4e3b-ac1c-da2c2267e28e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:20:58.000Z", "modified": "2018-08-15T18:20:58.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:45:01", "category": "Other", "uuid": "fe8e0208-3c88-43ee-8ba1-602b2d69a05e" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/2295dc79778c05ddb4e7518499075e886f8715429160af103cc928cb1880affb/analysis/1534351501/", "category": "External analysis", "uuid": "e8a2807e-c2d2-4959-a3a1-039d600b99d6" }, { "type": "text", "object_relation": "detection-ratio", "value": "32/62", "category": "Other", "uuid": "faee17f7-73b6-4a16-aafd-b101e4e19d7d" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a56bcd41-6085-4433-bb14-785ac0e793ea", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:02.000Z", "modified": "2018-08-15T18:21:02.000Z", "pattern": "[file:hashes.MD5 = '7b00d9246335fd3fbb2cac2f2fe9354b' AND file:hashes.SHA1 = '912caa57512e94126cbad3ce9b5f0c676363c2fc' AND file:hashes.SHA256 = 'be40b7601baeeae327ff2faf08944b7764547e1098557979677014490dc4e6c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--06e41e77-daaa-4e37-9863-7e2fe891d6b2", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:01.000Z", "modified": "2018-08-15T18:21:01.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:45:00", "category": "Other", "uuid": "d40189af-63c1-48e2-ac5f-13d09bf43bd6" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/be40b7601baeeae327ff2faf08944b7764547e1098557979677014490dc4e6c3/analysis/1534351500/", "category": "External analysis", "uuid": "b95d8dac-d057-4433-8a26-e3b28f1c2dfd" }, { "type": "text", "object_relation": "detection-ratio", "value": "32/62", "category": "Other", "uuid": "c539ac63-2a87-4e57-9ece-cab82fc434b3" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4b7183d5-3eab-43dd-a70e-22c3a1967bb8", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:05.000Z", "modified": "2018-08-15T18:21:05.000Z", "pattern": "[file:hashes.MD5 = '89b04c7e0b896a30d09a138b6bc3e828' AND file:hashes.SHA1 = '29f90baccaf7de65f4c968cd7f91fa00a4d97137' AND file:hashes.SHA256 = 'cf59012780efc61b5b43f871b930f641aefe5f8ec87290c20ab643fb60d86fc3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--e2419d00-69a3-4e6e-b87e-ec8223a7b5cd", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:03.000Z", "modified": "2018-08-15T18:21:03.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:44:50", "category": "Other", "uuid": "20c72063-fb68-4c15-8331-a45a24c7dace" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/cf59012780efc61b5b43f871b930f641aefe5f8ec87290c20ab643fb60d86fc3/analysis/1534351490/", "category": "External analysis", "uuid": "447b932d-8f5e-4a92-9c88-621b3156b486" }, { "type": "text", "object_relation": "detection-ratio", "value": "37/62", "category": "Other", "uuid": "66583969-6ed2-40ff-8d79-d203215888e5" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ac5e2802-01b5-42a2-a4d7-d1bbbfbe144f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:07.000Z", "modified": "2018-08-15T18:21:07.000Z", "pattern": "[file:hashes.MD5 = '843e633b026c43b63b938effa4a36228' AND file:hashes.SHA1 = 'db1779c91ba7f4a50fed892634e8dade92b277d7' AND file:hashes.SHA256 = '0efaeb17f3febb68b3a14236aa1f231158a1690872914a0a2eb7c48c49fbd27a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--e0e980d2-9731-44db-8ccc-921e023bf9e7", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:06.000Z", "modified": "2018-08-15T18:21:06.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:44:55", "category": "Other", "uuid": "8a9c97c2-2b66-4bce-b075-47b050d40181" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/0efaeb17f3febb68b3a14236aa1f231158a1690872914a0a2eb7c48c49fbd27a/analysis/1534351495/", "category": "External analysis", "uuid": "a32246a7-3f13-4830-a3d4-91b30b227f4b" }, { "type": "text", "object_relation": "detection-ratio", "value": "28/62", "category": "Other", "uuid": "1ba54acd-17f6-45cf-9f1c-19d88d968dc8" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3630e203-611d-460f-8f70-b44344d5409f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:10.000Z", "modified": "2018-08-15T18:21:10.000Z", "pattern": "[file:hashes.MD5 = '47fc61cd1d939c99c000afe430451952' AND file:hashes.SHA1 = 'bb945f4a3e7f0c0477b99cee728272251e23ab70' AND file:hashes.SHA256 = '9ef27402c22f2dca4ff55ffa321b4f01a23504136f74a73c8c88976fa9a00f9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--4bfff4ec-7aac-4e69-8cac-a90fcfc0130f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:08.000Z", "modified": "2018-08-15T18:21:08.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:45:13", "category": "Other", "uuid": "b6251096-4dd5-40eb-a21a-81d3a86993df" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/9ef27402c22f2dca4ff55ffa321b4f01a23504136f74a73c8c88976fa9a00f9c/analysis/1534351513/", "category": "External analysis", "uuid": "ca9238f7-8706-45e3-ae93-8ec5dafdcd1c" }, { "type": "text", "object_relation": "detection-ratio", "value": "29/62", "category": "Other", "uuid": "515f350c-5513-4c51-b156-9371debcc1a8" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--91cf78e9-e36d-4ccc-af1f-485a4b238560", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:12.000Z", "modified": "2018-08-15T18:21:12.000Z", "pattern": "[file:hashes.MD5 = 'c2da8cc0725558304dfd2a59386373f7' AND file:hashes.SHA1 = 'a3824ad7c3999c3d55b632eed01cab620f016446' AND file:hashes.SHA256 = '8b1bbd63a5679be8ea1a2249c36534854e25ee264219eab2dc1e915f49865365']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--196992e9-5607-4028-b60c-5a22b5839dde", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:10.000Z", "modified": "2018-08-15T18:21:10.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:44:57", "category": "Other", "uuid": "aa594984-a7fc-4d08-a4f8-d480dcffef55" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/8b1bbd63a5679be8ea1a2249c36534854e25ee264219eab2dc1e915f49865365/analysis/1534351497/", "category": "External analysis", "uuid": "b6b0b7e5-7ffc-4d25-88b4-9e4b12d32cc7" }, { "type": "text", "object_relation": "detection-ratio", "value": "28/62", "category": "Other", "uuid": "a3fb7918-0b1c-46be-a6ae-58ef218998fb" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a47107f2-a312-40fb-8f78-8b905fa6681d", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:14.000Z", "modified": "2018-08-15T18:21:14.000Z", "pattern": "[file:hashes.MD5 = 'ca9bc074668bb04552610ee835a0e9cf' AND file:hashes.SHA1 = '3fc93b5dbd1b34504d186c10a4d98c1124b5098a' AND file:hashes.SHA256 = 'c3544ddb175689cf3aadc5967f061594c210d78db45b3bb5925dedf3700ad4f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--928814bd-64d5-4ecd-bc5f-655ebf15c21a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:13.000Z", "modified": "2018-08-15T18:21:13.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:45:05", "category": "Other", "uuid": "9a606195-57fc-4330-8864-e66304c72ef6" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/c3544ddb175689cf3aadc5967f061594c210d78db45b3bb5925dedf3700ad4f7/analysis/1534351505/", "category": "External analysis", "uuid": "d7bb4342-59c9-4332-9cf7-1a9a2de5de55" }, { "type": "text", "object_relation": "detection-ratio", "value": "31/62", "category": "Other", "uuid": "5cfa7544-5cb6-4cd1-bf5e-e7825e22ce19" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7b1d01d7-f361-413f-91ad-f0d37a870129", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:17.000Z", "modified": "2018-08-15T18:21:17.000Z", "pattern": "[file:hashes.MD5 = '397ed4c4c372fe50588123d6885497c3' AND file:hashes.SHA1 = '2367fc3b992e74a48aac7292c94798956e50c28f' AND file:hashes.SHA256 = '5e8f956911ea2980afc7d95afcedd19e7828ee861c5df8c857cf3a7141e81f84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--ffc57365-4cf2-41a6-81f8-3573432a09af", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:15.000Z", "modified": "2018-08-15T18:21:15.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:45:09", "category": "Other", "uuid": "7bd3d2a5-8644-43fb-9027-03231645ef1c" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/5e8f956911ea2980afc7d95afcedd19e7828ee861c5df8c857cf3a7141e81f84/analysis/1534351509/", "category": "External analysis", "uuid": "847ee887-b2b8-4e59-915c-0e745e202ec3" }, { "type": "text", "object_relation": "detection-ratio", "value": "30/62", "category": "Other", "uuid": "98f74e2b-6672-4b4c-a389-66643e2bd607" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--162c438c-69f6-4b5e-8e4c-b4f75ed40df4", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:19.000Z", "modified": "2018-08-15T18:21:19.000Z", "pattern": "[file:hashes.MD5 = '4efdbdcb3c341f86c4ff40764cd6468f' AND file:hashes.SHA1 = '07181166766b8fdf7296a402406c606bbbad2f90' AND file:hashes.SHA256 = '1d2394e4501d1ed83259333e5aa81cdbc58557c42a4d4976982d84dd6fdd4128']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--da852be4-9cb2-4bac-a6a5-030bc914e630", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:17.000Z", "modified": "2018-08-15T18:21:17.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-14T07:04:09", "category": "Other", "uuid": "3d8ac427-99fa-49b2-a2a7-5f724a150285" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/1d2394e4501d1ed83259333e5aa81cdbc58557c42a4d4976982d84dd6fdd4128/analysis/1534230249/", "category": "External analysis", "uuid": "49e435a2-fa77-48e0-8464-7bfcc6dac210" }, { "type": "text", "object_relation": "detection-ratio", "value": "20/60", "category": "Other", "uuid": "603fac01-1133-43e1-9675-8c75b9750718" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9a5fabe2-1e0b-4cc5-b0e9-365772adee52", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:21.000Z", "modified": "2018-08-15T18:21:21.000Z", "pattern": "[file:hashes.MD5 = '92d79d7a27966ea4668e347fe9a97c62' AND file:hashes.SHA1 = '8ac9ab3c62acd3e43eb2d5c9ae3f00902218892c' AND file:hashes.SHA256 = '920f18c5ffb59856deccf2d984ab07793fefeea9a5a45d1e8a94a57da9d2347c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--bf3e97e8-306a-44e9-91b4-0c274ad51734", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:20.000Z", "modified": "2018-08-15T18:21:20.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:45:04", "category": "Other", "uuid": "07888bc3-7555-4ab1-a46b-ac57956970e9" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/920f18c5ffb59856deccf2d984ab07793fefeea9a5a45d1e8a94a57da9d2347c/analysis/1534351504/", "category": "External analysis", "uuid": "3b931fab-d5d1-452c-8af8-14ce0135f93c" }, { "type": "text", "object_relation": "detection-ratio", "value": "30/61", "category": "Other", "uuid": "d6031b1b-0a0a-4627-aaf4-18760c5c127d" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c760affd-636c-478d-ba6a-a3749a64b781", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:24.000Z", "modified": "2018-08-15T18:21:24.000Z", "pattern": "[file:hashes.MD5 = 'e8b68543c78b3dc27c7951e1dc8fae89' AND file:hashes.SHA1 = '547f41cf853651eff2d25fd9095d7c24cf129d1f' AND file:hashes.SHA256 = '4c2797e3b0c7975bc861bed2353d036f980ad8ffe289805f72093e860555bc67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--ba15ef40-6ac2-487c-940e-83c3174da083", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:23.000Z", "modified": "2018-08-15T18:21:23.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:45:14", "category": "Other", "uuid": "d95ccf8c-1e9f-4d4d-a06a-88c6885b79e7" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/4c2797e3b0c7975bc861bed2353d036f980ad8ffe289805f72093e860555bc67/analysis/1534351514/", "category": "External analysis", "uuid": "7f785862-a03d-4ca2-aafd-37c2eb07fe82" }, { "type": "text", "object_relation": "detection-ratio", "value": "34/62", "category": "Other", "uuid": "d2f801fb-7da9-4a0b-84e1-07f54fb13fcc" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e2e80668-791c-4d9a-80d4-dd25ba800c57", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:27.000Z", "modified": "2018-08-15T18:21:27.000Z", "pattern": "[file:hashes.MD5 = 'fc385c0f00313ad3ba08576a28ca9b66' AND file:hashes.SHA1 = 'aa162e03cafbe4322c524fb2b3f2aabb7120b148' AND file:hashes.SHA256 = '47be22bed22c58aad09fde547cb98d007d3ff2cf94c16aaa1d99270e4196e940']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--28caf2ea-f4fe-4f30-8fa5-4a1ed8b06e46", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:26.000Z", "modified": "2018-08-15T18:21:26.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:44:54", "category": "Other", "uuid": "d94f59eb-adee-4d95-aebe-4fe9d8774230" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/47be22bed22c58aad09fde547cb98d007d3ff2cf94c16aaa1d99270e4196e940/analysis/1534351494/", "category": "External analysis", "uuid": "14f53538-dc2e-46b8-a284-fe9114a40efe" }, { "type": "text", "object_relation": "detection-ratio", "value": "25/62", "category": "Other", "uuid": "28679d76-1a32-4f37-bcee-9363c9fbcad2" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fe9c1e41-f204-4e12-a71c-02f86c3046ae", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:30.000Z", "modified": "2018-08-15T18:21:30.000Z", "pattern": "[file:hashes.MD5 = '1b3693237173c8b7ee2942b69812eb47' AND file:hashes.SHA1 = '2044e2d76bb67e3d47e5c2014bd6c5b398971b19' AND file:hashes.SHA256 = 'd980e95023e1093b2dfea5ae8e4f60e00a780730e553494aa4b5fd61860dbc64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--36e12367-4a2f-4c7e-9857-05cbda8aa0be", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:28.000Z", "modified": "2018-08-15T18:21:28.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:44:59", "category": "Other", "uuid": "49ddae4c-c5b9-40fe-89c7-ffc424a5bd8a" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/d980e95023e1093b2dfea5ae8e4f60e00a780730e553494aa4b5fd61860dbc64/analysis/1534351499/", "category": "External analysis", "uuid": "de85ed97-ba47-4f92-9bfd-dca343be7e58" }, { "type": "text", "object_relation": "detection-ratio", "value": "34/62", "category": "Other", "uuid": "9b02bf16-dea0-46db-93ef-347219d7cd0c" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0610b8d6-dd83-4b25-a77a-83003ffd0e11", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:33.000Z", "modified": "2018-08-15T18:21:33.000Z", "pattern": "[file:hashes.MD5 = '7a2b1c70213ad493a053a1e252c00a54' AND file:hashes.SHA1 = 'a6730c4ba67856f7efdb8e50b73bdf76c234a8bc' AND file:hashes.SHA256 = '1924cdf76764a84877baae88ebbed2f9cafdc1b4bae6b9977c6af2350da1201b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--efc8b853-d469-4274-9070-ab6c9da8f164", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:31.000Z", "modified": "2018-08-15T18:21:31.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:44:52", "category": "Other", "uuid": "e3b1f4ef-5707-4ab2-802f-2cfda894a065" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/1924cdf76764a84877baae88ebbed2f9cafdc1b4bae6b9977c6af2350da1201b/analysis/1534351492/", "category": "External analysis", "uuid": "497b0024-60c9-4888-8f88-9088c5774cef" }, { "type": "text", "object_relation": "detection-ratio", "value": "35/62", "category": "Other", "uuid": "8425524c-f64f-4974-9687-4410d4b5038d" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--60193ac5-f0d1-42b3-83ac-3261849cd66b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:35.000Z", "modified": "2018-08-15T18:21:35.000Z", "pattern": "[file:hashes.MD5 = '28d30f19e96200bcf5067d5fd3b69439' AND file:hashes.SHA1 = '3bbe8ba59481ecedc6012d4fd4b6cfb51b565b83' AND file:hashes.SHA256 = '79fecbdeeb6a4d31133359c4b8ecf9035ddc1534fcfa6c0d51d62c27d441a6ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2018-08-15T18:21:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "file" } ], "labels": [ "misp:name=\"file\"", "misp:meta-category=\"file\"", "misp:to_ids=\"True\"" ] }, { "type": "x-misp-object", "spec_version": "2.1", "id": "x-misp-object--836bbef9-5015-4e6e-b2a7-2a09752ddd57", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2018-08-15T18:21:33.000Z", "modified": "2018-08-15T18:21:33.000Z", "labels": [ "misp:name=\"virustotal-report\"", "misp:meta-category=\"misc\"" ], "x_misp_attributes": [ { "type": "datetime", "object_relation": "last-submission", "value": "2018-08-15T16:45:07", "category": "Other", "uuid": "6bc06611-fef4-4228-951d-9f4277f9ba6e" }, { "type": "link", "object_relation": "permalink", "value": "https://www.virustotal.com/file/79fecbdeeb6a4d31133359c4b8ecf9035ddc1534fcfa6c0d51d62c27d441a6ad/analysis/1534351507/", "category": "External analysis", "uuid": "d00325bb-dce5-471c-aebe-1246c34c3ad1" }, { "type": "text", "object_relation": "detection-ratio", "value": "36/62", "category": "Other", "uuid": "99ff0854-d106-47cd-9e75-bc999593d0ee" } ], "x_misp_meta_category": "misc", "x_misp_name": "virustotal-report" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31a6d400-6ffc-4dff-9aea-2dfef8783a43", "created": "2018-08-15T18:21:34.000Z", "modified": "2018-08-15T18:21:34.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--ca5d681d-33b4-4ec9-96e6-febd3f3a722b", "target_ref": "x-misp-object--117215e1-1d52-4fff-bc8d-0979cfbd51cf" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50acfd39-9501-4f31-a41e-d0391d23a3e7", "created": "2018-08-15T18:21:34.000Z", "modified": "2018-08-15T18:21:34.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--47daea83-d20e-4064-98ff-6a61429bb3f5", "target_ref": "x-misp-object--a8f72315-ebf8-49de-94f3-af53b9fbaa1e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--82bd3b4c-3ece-4be3-9409-1de6867bfd5f", "created": "2018-08-15T18:21:35.000Z", "modified": "2018-08-15T18:21:35.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--0fe484c0-2241-4fc9-bafd-df712f86aca3", "target_ref": "x-misp-object--1d42a1e0-62cc-4174-ac95-49f920e761e2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ce468b0-854b-4f73-87ed-dc8458f23edd", "created": "2018-08-15T18:21:35.000Z", "modified": "2018-08-15T18:21:35.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--391b876f-a4d1-4c80-93fc-554a2f6ad26c", "target_ref": "x-misp-object--a84adc75-9c11-49db-955f-fcd79e35c28c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--51e2131a-2255-4a62-94f9-c481339e8a90", "created": "2018-08-15T18:21:35.000Z", "modified": "2018-08-15T18:21:35.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--86dd19f6-a9c7-4fd5-a786-77d48d01e0e4", "target_ref": "x-misp-object--a3a0e935-7112-4262-bd49-cd81bc50a57b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0030f751-58cd-4bf6-ac81-504212a12e55", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--23283183-68d7-4a71-9e9e-33939bcdfda3", "target_ref": "x-misp-object--1be51f84-f11e-4e3b-ac1c-da2c2267e28e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3ab5f78f-11a8-4026-b15f-6b11045020c3", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--a56bcd41-6085-4433-bb14-785ac0e793ea", "target_ref": "x-misp-object--06e41e77-daaa-4e37-9863-7e2fe891d6b2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0550ab49-b0db-47e1-8ccd-47bc40c105d3", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--4b7183d5-3eab-43dd-a70e-22c3a1967bb8", "target_ref": "x-misp-object--e2419d00-69a3-4e6e-b87e-ec8223a7b5cd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50596ec8-5e13-4070-ac00-8388f7642094", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--ac5e2802-01b5-42a2-a4d7-d1bbbfbe144f", "target_ref": "x-misp-object--e0e980d2-9731-44db-8ccc-921e023bf9e7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a76ec13-2849-4c3b-8156-6cea5dffd730", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--3630e203-611d-460f-8f70-b44344d5409f", "target_ref": "x-misp-object--4bfff4ec-7aac-4e69-8cac-a90fcfc0130f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2d156ce6-e4a7-4328-9532-b39d1f8746c1", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--91cf78e9-e36d-4ccc-af1f-485a4b238560", "target_ref": "x-misp-object--196992e9-5607-4028-b60c-5a22b5839dde" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c7085d9e-73c6-460e-a94a-01dee82cdc39", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--a47107f2-a312-40fb-8f78-8b905fa6681d", "target_ref": "x-misp-object--928814bd-64d5-4ecd-bc5f-655ebf15c21a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5634e793-1809-436e-a970-6033cafd3f98", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--7b1d01d7-f361-413f-91ad-f0d37a870129", "target_ref": "x-misp-object--ffc57365-4cf2-41a6-81f8-3573432a09af" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec603621-4792-444d-a633-12c974d76eeb", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--162c438c-69f6-4b5e-8e4c-b4f75ed40df4", "target_ref": "x-misp-object--da852be4-9cb2-4bac-a6a5-030bc914e630" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c3d2b7d-4ea6-4480-b8ed-ac005932d3c5", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--9a5fabe2-1e0b-4cc5-b0e9-365772adee52", "target_ref": "x-misp-object--bf3e97e8-306a-44e9-91b4-0c274ad51734" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d5c6b030-11fb-414d-8402-1c0cb3ec4f73", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--c760affd-636c-478d-ba6a-a3749a64b781", "target_ref": "x-misp-object--ba15ef40-6ac2-487c-940e-83c3174da083" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a10674fe-1f77-4b6e-baf0-d18a9c82bc6e", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--e2e80668-791c-4d9a-80d4-dd25ba800c57", "target_ref": "x-misp-object--28caf2ea-f4fe-4f30-8fa5-4a1ed8b06e46" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--12a0e54b-9b55-46fc-a585-57da328f4165", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--fe9c1e41-f204-4e12-a71c-02f86c3046ae", "target_ref": "x-misp-object--36e12367-4a2f-4c7e-9857-05cbda8aa0be" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e6df163-3dc7-4f7a-8780-c5841762d0ba", "created": "2018-08-15T18:21:36.000Z", "modified": "2018-08-15T18:21:36.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--0610b8d6-dd83-4b25-a77a-83003ffd0e11", "target_ref": "x-misp-object--efc8b853-d469-4274-9070-ab6c9da8f164" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec985f4d-7b2c-4859-b021-940c6758718e", "created": "2018-08-15T18:21:37.000Z", "modified": "2018-08-15T18:21:37.000Z", "relationship_type": "analysed-with", "source_ref": "indicator--60193ac5-f0d1-42b3-83ac-3261849cd66b", "target_ref": "x-misp-object--836bbef9-5015-4e6e-b2a7-2a09752ddd57" }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } } ] }