{ "type": "bundle", "id": "bundle--5c46aef6-2d30-4fce-9d13-4852950d210f", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:16.000Z", "modified": "2019-01-22T05:56:16.000Z", "name": "CIRCL", "identity_class": "organization" }, { "type": "grouping", "spec_version": "2.1", "id": "grouping--5c46aef6-2d30-4fce-9d13-4852950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:16.000Z", "modified": "2019-01-22T05:56:16.000Z", "name": "OSINT Emotet 21/01/2019", "context": "suspicious-activity", "object_refs": [ "observed-data--5c46af0b-ce1c-40b9-9116-40ef950d210f", "url--5c46af0b-ce1c-40b9-9116-40ef950d210f", "indicator--5c46b04d-5774-4698-8389-4043950d210f", "indicator--5c46b04e-6120-48c1-aca9-48dc950d210f", "indicator--5c46b04e-21b4-4e9b-bdb8-41a5950d210f", "indicator--5c46b04f-fd80-4549-bfed-4247950d210f", "indicator--5c46b04f-d4f4-4e18-90ff-4e38950d210f", "indicator--5c46b051-0564-4d75-80f5-4ba1950d210f", "indicator--5c46b051-f91c-4081-aa88-47e1950d210f", "indicator--5c46b052-f3d0-4564-8e28-4d64950d210f", "indicator--5c46b052-05c4-4752-b23d-480b950d210f", "indicator--5c46b053-92b0-4022-aa79-46db950d210f", "indicator--5c46b053-d868-456c-9946-4dcb950d210f", "indicator--5c46b054-cbc0-4aeb-97c2-4067950d210f", "indicator--5c46b054-c5c8-43b2-af06-4d3b950d210f", "indicator--5c46b055-cc2c-435b-971c-4d5d950d210f", "indicator--5c46b055-59e8-4ffc-b5bc-4019950d210f", "indicator--5c46b056-8504-4353-b2ea-4fba950d210f", "indicator--5c46b056-3408-4602-8c0b-4776950d210f", "indicator--5c46b057-c71c-4f5a-836d-442b950d210f", "indicator--5c46b057-cbfc-4755-bfe0-4973950d210f", "indicator--5c46b058-b124-45c0-88d1-45f6950d210f", "indicator--5c46b058-9478-4256-bf4b-4044950d210f", "indicator--5c46b059-3e90-47c8-b80d-4bd8950d210f", "indicator--5c46b059-fd6c-4eef-9eaa-4dae950d210f", "indicator--5c46b05a-3358-471f-b12b-4a7a950d210f", "indicator--5c46b05a-5e1c-48b5-a22b-43d2950d210f", "indicator--5c46b05b-86c0-4ac0-a054-47dd950d210f", "indicator--5c46b05b-4094-470b-9253-4cff950d210f", "indicator--5c46b05c-95e4-4906-9a35-4a81950d210f", "indicator--5c46b05c-1678-43ba-a89b-4fbe950d210f", "indicator--5c46b05d-6298-4d76-8d6e-4981950d210f", "indicator--5c46b05d-4a4c-4438-a5f3-460f950d210f", "indicator--5c46b05e-04e0-4e50-b57e-4a00950d210f", "indicator--5c46b05e-632c-4633-af06-4ccf950d210f", "indicator--5c46b05e-4e78-44db-8fcb-4d3c950d210f", "indicator--5c46b060-bd00-4bc8-b182-43cd950d210f", "indicator--5c46b060-262c-4ab4-b33d-4db6950d210f", "indicator--5c46b061-1a94-4739-857c-4801950d210f", "indicator--5c46b062-48e8-4f69-9bf9-4f1e950d210f", "indicator--5c46b062-6790-4479-990a-4008950d210f", "indicator--5c46b063-c204-47ed-8403-4065950d210f", "indicator--5c46b063-57b0-456e-a423-4da4950d210f", "indicator--5c46b064-8ee0-47e4-bac3-474f950d210f", "indicator--5c46b064-cd68-4cb1-8e71-4a4d950d210f", "indicator--5c46b065-0eb8-45f3-9916-4171950d210f", "indicator--5c46b065-f514-43a2-a383-4b9b950d210f", "indicator--5c46b066-538c-4f40-bf1a-46dd950d210f", "indicator--5c46b066-f0d8-40a9-973b-41a6950d210f", "indicator--5c46b066-bde0-4152-a628-4b3c950d210f", "indicator--5c46b067-5fdc-4aa5-a1af-4e7d950d210f", "indicator--5c46b067-243c-439f-b90a-48db950d210f", "indicator--5c46b068-4e0c-45d3-9437-4ed1950d210f", "indicator--5c46b069-bd04-4528-affe-4d9f950d210f", "indicator--5c46b069-9d50-47fe-a016-4c20950d210f", "indicator--5c46b069-5c04-414b-bf3c-465d950d210f", "indicator--5c46b06a-d404-4b60-a08c-49f1950d210f", "indicator--5c46b06a-5b00-48a4-8ce1-462f950d210f", "indicator--5c46b06b-abe4-4c14-95b1-423d950d210f", "indicator--5c46b06b-f7b0-4d5d-bdd5-4d3d950d210f", "indicator--5c46b06c-c080-4f13-8ee8-469d950d210f", "indicator--5c46b06c-4680-49ce-9ed4-4850950d210f", "indicator--5c46b06d-9e28-4590-9ed5-425c950d210f", "indicator--5c46b06e-e87c-4632-ab54-43eb950d210f", "indicator--5c46b06f-c284-44af-991d-4711950d210f", "indicator--5c46b06f-c2d4-407b-8c49-49d7950d210f", "indicator--5c46b070-c504-4402-979e-45d2950d210f", "indicator--5c46b070-8b50-4955-aa9d-43ee950d210f", "indicator--5c46b071-b38c-42a7-b01d-4de3950d210f", "indicator--5c46b071-b6b0-4fc0-9646-47d7950d210f", "indicator--5c46b072-de60-40a0-b18b-4331950d210f", "indicator--5c46b072-3844-4803-b7c3-48a5950d210f", "indicator--5c46b073-568c-4320-96e8-4e32950d210f", "indicator--5c46b073-cef8-41a5-8a99-493c950d210f", "indicator--5c46b074-7c20-411d-83ac-4b9a950d210f", "indicator--5c46b074-00ec-4b8d-b97b-4230950d210f", "indicator--5c46b075-512c-4e87-893d-4042950d210f", "indicator--5c46b075-6bac-4628-9968-479f950d210f", "indicator--5c46b076-3228-4b3b-95e0-4841950d210f", "indicator--5c46b076-2908-4f61-af09-444a950d210f", "indicator--5c46b076-1d54-457e-83cc-4159950d210f", "indicator--5c46b077-67ec-4348-b864-4dcc950d210f", "indicator--5c46b077-39fc-4683-a7c3-4b64950d210f", "indicator--5c46b078-09f4-45f4-a857-42de950d210f", "indicator--5c46b078-0448-48e5-b563-4a14950d210f", "indicator--5c46b079-0908-457c-ae4b-40c1950d210f", "indicator--5c46b079-0adc-4bfb-b79e-4ab1950d210f", "indicator--5c46b07a-7588-4d4e-ae04-4471950d210f", "indicator--5c46b07a-9680-440a-8151-47cb950d210f", "indicator--5c46b07b-b0f4-46d3-848b-492b950d210f", "indicator--5c46b07b-eff4-4122-a0a5-459d950d210f", "indicator--5c46b07d-f658-4fb3-ae10-4414950d210f", "indicator--5c46b07d-6f54-467e-8f66-4326950d210f", "indicator--5c46b07e-6e24-4fac-97e7-4c11950d210f", "indicator--5c46b07e-06c8-4524-80e7-47fc950d210f", "indicator--5c46b07f-dac8-4ae7-8d02-458b950d210f", "indicator--5c46b07f-ec44-4525-b6b4-458a950d210f", "indicator--5c46b080-270c-4634-ac67-44c6950d210f" ], "labels": [ "Threat-Report", "misp:tool=\"MISP-STIX-Converter\"", "type:OSINT", "osint:lifetime=\"perpetual\"", "osint:certainty=\"50\"" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "observed-data", "spec_version": "2.1", "id": "observed-data--5c46af0b-ce1c-40b9-9116-40ef950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:50:03.000Z", "modified": "2019-01-22T05:50:03.000Z", "first_observed": "2019-01-22T05:50:03Z", "last_observed": "2019-01-22T05:50:03Z", "number_observed": 1, "object_refs": [ "url--5c46af0b-ce1c-40b9-9116-40ef950d210f" ], "labels": [ "misp:type=\"link\"", "misp:category=\"External analysis\"" ] }, { "type": "url", "spec_version": "2.1", "id": "url--5c46af0b-ce1c-40b9-9116-40ef950d210f", "value": "https://pastebin.com/CbTK7u7J" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b04d-5774-4698-8389-4043950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:25.000Z", "modified": "2019-01-22T05:55:25.000Z", "pattern": "[file:hashes.MD5 = '0000e0ee9aa9af87c450a8f0ea2fe2cd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b04e-6120-48c1-aca9-48dc950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:26.000Z", "modified": "2019-01-22T05:55:26.000Z", "pattern": "[file:hashes.MD5 = '009f3afd89f0b79d48fcb14538d949cd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b04e-21b4-4e9b-bdb8-41a5950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:26.000Z", "modified": "2019-01-22T05:55:26.000Z", "pattern": "[file:name = '2019_Januar_7613802680.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b04f-fd80-4549-bfed-4247950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:27.000Z", "modified": "2019-01-22T05:55:27.000Z", "pattern": "[file:hashes.MD5 = '02b4704f973ba562feaa7f068695a135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b04f-d4f4-4e18-90ff-4e38950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:27.000Z", "modified": "2019-01-22T05:55:27.000Z", "pattern": "[file:name = 'BESTELLDETAILS.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b051-0564-4d75-80f5-4ba1950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:29.000Z", "modified": "2019-01-22T05:55:29.000Z", "pattern": "[file:hashes.MD5 = '0776e7f9fbbdb19c5e30c361cd94c1b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b051-f91c-4081-aa88-47e1950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:29.000Z", "modified": "2019-01-22T05:55:29.000Z", "pattern": "[file:name = 'Bestelldetails_Formular.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b052-f3d0-4564-8e28-4d64950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:30.000Z", "modified": "2019-01-22T05:55:30.000Z", "pattern": "[file:hashes.MD5 = '093df16c741c9aa694ce3481d2b738cb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b052-05c4-4752-b23d-480b950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:30.000Z", "modified": "2019-01-22T05:55:30.000Z", "pattern": "[file:name = 'BESTELLDETAILS_eDATEI.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b053-92b0-4022-aa79-46db950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:31.000Z", "modified": "2019-01-22T05:55:31.000Z", "pattern": "[file:hashes.MD5 = '0b99aaa29a89dca9609ae654966433d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b053-d868-456c-9946-4dcb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:31.000Z", "modified": "2019-01-22T05:55:31.000Z", "pattern": "[file:hashes.MD5 = '0d1ad5204ea86916bed3b2a15ec3d578']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b054-cbc0-4aeb-97c2-4067950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:32.000Z", "modified": "2019-01-22T05:55:32.000Z", "pattern": "[file:name = '22_Januar_2019_4081402067.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b054-c5c8-43b2-af06-4d3b950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:32.000Z", "modified": "2019-01-22T05:55:32.000Z", "pattern": "[file:hashes.MD5 = '0d9f7733756f5c91b600d22fa5886dfa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b055-cc2c-435b-971c-4d5d950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:33.000Z", "modified": "2019-01-22T05:55:33.000Z", "pattern": "[file:name = '2019_Januar.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b055-59e8-4ffc-b5bc-4019950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:33.000Z", "modified": "2019-01-22T05:55:33.000Z", "pattern": "[file:hashes.MD5 = '17f5c2d05bc678b043e595225269af6f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b056-8504-4353-b2ea-4fba950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:34.000Z", "modified": "2019-01-22T05:55:34.000Z", "pattern": "[file:hashes.MD5 = '1b551b5a0e926bffcf1c6eea72c589f4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b056-3408-4602-8c0b-4776950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:34.000Z", "modified": "2019-01-22T05:55:34.000Z", "pattern": "[file:hashes.MD5 = '1f5e04d34d08b39348b8afada01d1248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b057-c71c-4f5a-836d-442b950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:35.000Z", "modified": "2019-01-22T05:55:35.000Z", "pattern": "[file:hashes.MD5 = '1fbe05b5404f12b8e37e46d67ac1b73f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b057-cbfc-4755-bfe0-4973950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:35.000Z", "modified": "2019-01-22T05:55:35.000Z", "pattern": "[file:hashes.MD5 = '202c01d38313412fab8eddf766b0db8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b058-b124-45c0-88d1-45f6950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:36.000Z", "modified": "2019-01-22T05:55:36.000Z", "pattern": "[file:name = 'bestelldetails_datei.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b058-9478-4256-bf4b-4044950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:36.000Z", "modified": "2019-01-22T05:55:36.000Z", "pattern": "[file:hashes.MD5 = '272abc97a09585207ddff73caa89dee2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b059-3e90-47c8-b80d-4bd8950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:37.000Z", "modified": "2019-01-22T05:55:37.000Z", "pattern": "[file:hashes.MD5 = '2c434b5fc9f24ec1f6a74dd7a302d981']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:37Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b059-fd6c-4eef-9eaa-4dae950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:37.000Z", "modified": "2019-01-22T05:55:37.000Z", "pattern": "[file:hashes.MD5 = '2dc62ba269a8d7443363e8e9e368b7a0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:37Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b05a-3358-471f-b12b-4a7a950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:38.000Z", "modified": "2019-01-22T05:55:38.000Z", "pattern": "[file:hashes.MD5 = '2dd9152a0fcc6f1b779d8cffeeb3ade5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b05a-5e1c-48b5-a22b-43d2950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:38.000Z", "modified": "2019-01-22T05:55:38.000Z", "pattern": "[file:name = '2019_Januar_3612834006.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b05b-86c0-4ac0-a054-47dd950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:39.000Z", "modified": "2019-01-22T05:55:39.000Z", "pattern": "[file:hashes.MD5 = '2f2c120dc55cd620ed2a69bf7cecb336']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b05b-4094-470b-9253-4cff950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:39.000Z", "modified": "2019-01-22T05:55:39.000Z", "pattern": "[file:name = 'BESTELLDETAILS_eFORMULAR.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b05c-95e4-4906-9a35-4a81950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:40.000Z", "modified": "2019-01-22T05:55:40.000Z", "pattern": "[file:hashes.MD5 = '2f99f1b1e6bc1f023e4fbd74715279fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:40Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b05c-1678-43ba-a89b-4fbe950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:40.000Z", "modified": "2019-01-22T05:55:40.000Z", "pattern": "[file:name = '2019_Januar_00_02_04_Uhr.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:40Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b05d-6298-4d76-8d6e-4981950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:41.000Z", "modified": "2019-01-22T05:55:41.000Z", "pattern": "[file:hashes.MD5 = '30503ebeac1f8e2eba7f62f91a4ffc7d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:41Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b05d-4a4c-4438-a5f3-460f950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:41.000Z", "modified": "2019-01-22T05:55:41.000Z", "pattern": "[file:hashes.MD5 = '3306801f5e148ceb6a755e23db518f16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:41Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b05e-04e0-4e50-b57e-4a00950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:42.000Z", "modified": "2019-01-22T05:55:42.000Z", "pattern": "[file:hashes.MD5 = '3516a05c7b60b27b0f00a5dc51924ee6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b05e-632c-4633-af06-4ccf950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:42.000Z", "modified": "2019-01-22T05:55:42.000Z", "pattern": "[file:name = '2019_Januar_01_05_11_Uhr.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b05e-4e78-44db-8fcb-4d3c950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:42.000Z", "modified": "2019-01-22T05:55:42.000Z", "pattern": "[file:hashes.MD5 = '3a863c0b3b00a646a186e039ce06f9bd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b060-bd00-4bc8-b182-43cd950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:44.000Z", "modified": "2019-01-22T05:55:44.000Z", "pattern": "[file:hashes.MD5 = '453a60a0a32260a743d3b6228d691973']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b060-262c-4ab4-b33d-4db6950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:44.000Z", "modified": "2019-01-22T05:55:44.000Z", "pattern": "[file:hashes.MD5 = '4be74afc2411f6769d6f71619cef74ff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b061-1a94-4739-857c-4801950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:45.000Z", "modified": "2019-01-22T05:55:45.000Z", "pattern": "[file:name = '22_Januar_2019_03_36_04_Uhr.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b062-48e8-4f69-9bf9-4f1e950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:46.000Z", "modified": "2019-01-22T05:55:46.000Z", "pattern": "[file:hashes.MD5 = '4ebde0d021e0096d5ad74e14cc4ddbfa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b062-6790-4479-990a-4008950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:46.000Z", "modified": "2019-01-22T05:55:46.000Z", "pattern": "[file:hashes.MD5 = '51e7c8c3fb4d8606bcefce21c7398ff2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b063-c204-47ed-8403-4065950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:47.000Z", "modified": "2019-01-22T05:55:47.000Z", "pattern": "[file:hashes.MD5 = '52f6da995dbf1f6842af42e126ed7ea0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b063-57b0-456e-a423-4da4950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:47.000Z", "modified": "2019-01-22T05:55:47.000Z", "pattern": "[file:hashes.MD5 = '53d3b4cd722d60bcb06e0c91f4d7a276']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b064-8ee0-47e4-bac3-474f950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:48.000Z", "modified": "2019-01-22T05:55:48.000Z", "pattern": "[file:hashes.MD5 = '5589f118dfd140d40062f18cd5387a0a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b064-cd68-4cb1-8e71-4a4d950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:48.000Z", "modified": "2019-01-22T05:55:48.000Z", "pattern": "[file:hashes.MD5 = '5677e42b2d3dce233b70aff6696b9382']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b065-0eb8-45f3-9916-4171950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:49.000Z", "modified": "2019-01-22T05:55:49.000Z", "pattern": "[file:name = '22_Januar_2019_1644619248.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b065-f514-43a2-a383-4b9b950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:49.000Z", "modified": "2019-01-22T05:55:49.000Z", "pattern": "[file:hashes.MD5 = '56a0cfae30041bea64420bf24dff4376']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b066-538c-4f40-bf1a-46dd950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:50.000Z", "modified": "2019-01-22T05:55:50.000Z", "pattern": "[file:hashes.MD5 = '5ea1d4c62f4a8d3e83b2548dd7fc62b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b066-f0d8-40a9-973b-41a6950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:50.000Z", "modified": "2019-01-22T05:55:50.000Z", "pattern": "[file:hashes.MD5 = '651f5d49cdefe0eaa4e80af41c243df7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b066-bde0-4152-a628-4b3c950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:50.000Z", "modified": "2019-01-22T05:55:50.000Z", "pattern": "[file:name = '2019_Januar_04_12_02_Uhr.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b067-5fdc-4aa5-a1af-4e7d950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:51.000Z", "modified": "2019-01-22T05:55:51.000Z", "pattern": "[file:hashes.MD5 = '654330f4407a4cc3718b6274a3005a52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b067-243c-439f-b90a-48db950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:51.000Z", "modified": "2019-01-22T05:55:51.000Z", "pattern": "[file:name = '2019_Januar_01_32_03_Uhr.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b068-4e0c-45d3-9437-4ed1950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:52.000Z", "modified": "2019-01-22T05:55:52.000Z", "pattern": "[file:hashes.MD5 = '6a53520b6e4077043ce40b32a2fd9f10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b069-bd04-4528-affe-4d9f950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:53.000Z", "modified": "2019-01-22T05:55:53.000Z", "pattern": "[file:name = '22_Januar_2019.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b069-9d50-47fe-a016-4c20950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:53.000Z", "modified": "2019-01-22T05:55:53.000Z", "pattern": "[file:hashes.MD5 = '6da9182b4f6576bc7694dea52205b92a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b069-5c04-414b-bf3c-465d950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:53.000Z", "modified": "2019-01-22T05:55:53.000Z", "pattern": "[file:hashes.MD5 = '78c5e657fe9babb000ea2fc405b2e0f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b06a-d404-4b60-a08c-49f1950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:54.000Z", "modified": "2019-01-22T05:55:54.000Z", "pattern": "[file:hashes.MD5 = '7c7c0cae2210cb9d26e69482702f15f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b06a-5b00-48a4-8ce1-462f950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:54.000Z", "modified": "2019-01-22T05:55:54.000Z", "pattern": "[file:hashes.MD5 = '7d7324d7b543cac2de2f74ff4b698dee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b06b-abe4-4c14-95b1-423d950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:55.000Z", "modified": "2019-01-22T05:55:55.000Z", "pattern": "[file:hashes.MD5 = '7e513669d9ecde0bb4ae23b243c0b78a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b06b-f7b0-4d5d-bdd5-4d3d950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:55.000Z", "modified": "2019-01-22T05:55:55.000Z", "pattern": "[file:hashes.MD5 = '805afe8294487520d8aa3315d189bd46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b06c-c080-4f13-8ee8-469d950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:56.000Z", "modified": "2019-01-22T05:55:56.000Z", "pattern": "[file:hashes.MD5 = '82d6b00accfcc29acc909eb657c1ef14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b06c-4680-49ce-9ed4-4850950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:56.000Z", "modified": "2019-01-22T05:55:56.000Z", "pattern": "[file:name = '22_Januar_2019_9285691629.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b06d-9e28-4590-9ed5-425c950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:57.000Z", "modified": "2019-01-22T05:55:57.000Z", "pattern": "[file:hashes.MD5 = '836351dc9166e0ae0c77ae47c16c9c6e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b06e-e87c-4632-ab54-43eb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:58.000Z", "modified": "2019-01-22T05:55:58.000Z", "pattern": "[file:name = '2019_Januar_01_44_08_Uhr.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b06f-c284-44af-991d-4711950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:59.000Z", "modified": "2019-01-22T05:55:59.000Z", "pattern": "[file:hashes.MD5 = '84540a895c49d3f693e87f42464c002f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b06f-c2d4-407b-8c49-49d7950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:55:59.000Z", "modified": "2019-01-22T05:55:59.000Z", "pattern": "[file:hashes.MD5 = '885f391c59fceebfa9108e78c6897566']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:55:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b070-c504-4402-979e-45d2950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:00.000Z", "modified": "2019-01-22T05:56:00.000Z", "pattern": "[file:hashes.MD5 = '8ef54d556cbfd613a8d106d75736b2f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b070-8b50-4955-aa9d-43ee950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:00.000Z", "modified": "2019-01-22T05:56:00.000Z", "pattern": "[file:name = '2019_Januar_02_51_05_Uhr.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b071-b38c-42a7-b01d-4de3950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:01.000Z", "modified": "2019-01-22T05:56:01.000Z", "pattern": "[file:hashes.MD5 = '9cc711d8d5f8ae5f7aae2a19d38df04f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b071-b6b0-4fc0-9646-47d7950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:01.000Z", "modified": "2019-01-22T05:56:01.000Z", "pattern": "[file:name = '21_Januar_2019_6098938020.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b072-de60-40a0-b18b-4331950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:02.000Z", "modified": "2019-01-22T05:56:02.000Z", "pattern": "[file:hashes.MD5 = '9d3d8a76b4d0a5394519f60af10ae479']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b072-3844-4803-b7c3-48a5950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:02.000Z", "modified": "2019-01-22T05:56:02.000Z", "pattern": "[file:hashes.MD5 = '9db1ad11df41cd8d1e8c673164a2fc71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b073-568c-4320-96e8-4e32950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:03.000Z", "modified": "2019-01-22T05:56:03.000Z", "pattern": "[file:hashes.MD5 = 'a1ef5514ab5e7a1a496b1f6b755230b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b073-cef8-41a5-8a99-493c950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:03.000Z", "modified": "2019-01-22T05:56:03.000Z", "pattern": "[file:name = '2019_Januar_8892166195.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b074-7c20-411d-83ac-4b9a950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:04.000Z", "modified": "2019-01-22T05:56:04.000Z", "pattern": "[file:hashes.MD5 = 'a728b61c875be5d953040692c3c1e564']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b074-00ec-4b8d-b97b-4230950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:04.000Z", "modified": "2019-01-22T05:56:04.000Z", "pattern": "[file:hashes.MD5 = 'ac833848d3e34a35499133261100abd0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b075-512c-4e87-893d-4042950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:05.000Z", "modified": "2019-01-22T05:56:05.000Z", "pattern": "[file:hashes.MD5 = 'ad96bc525a118899aca1b9eae219062f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b075-6bac-4628-9968-479f950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:05.000Z", "modified": "2019-01-22T05:56:05.000Z", "pattern": "[file:name = '22_Januar_2019_21_27_10_Uhr.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b076-3228-4b3b-95e0-4841950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:06.000Z", "modified": "2019-01-22T05:56:06.000Z", "pattern": "[file:hashes.MD5 = 'b4bb9ba7cb22bb0ce5496688d4047983']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b076-2908-4f61-af09-444a950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:06.000Z", "modified": "2019-01-22T05:56:06.000Z", "pattern": "[file:hashes.MD5 = 'b9f3524ea6905b3298b1ea3376364129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b076-1d54-457e-83cc-4159950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:06.000Z", "modified": "2019-01-22T05:56:06.000Z", "pattern": "[file:hashes.MD5 = 'bc13a81efece4af92bc3b442ec3272ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b077-67ec-4348-b864-4dcc950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:07.000Z", "modified": "2019-01-22T05:56:07.000Z", "pattern": "[file:hashes.MD5 = 'd3576f8a7bc5c8bbf9ba5f6e45ff6848']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b077-39fc-4683-a7c3-4b64950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:07.000Z", "modified": "2019-01-22T05:56:07.000Z", "pattern": "[file:hashes.MD5 = 'd57306386ae27d30eda0cd2e7405b498']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b078-09f4-45f4-a857-42de950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:08.000Z", "modified": "2019-01-22T05:56:08.000Z", "pattern": "[file:hashes.MD5 = 'd6831c2744c034f9010e7f07e1df1aa1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b078-0448-48e5-b563-4a14950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:08.000Z", "modified": "2019-01-22T05:56:08.000Z", "pattern": "[file:hashes.MD5 = 'e1deb672010ff012f1b0c42c0c5bfbaf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b079-0908-457c-ae4b-40c1950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:09.000Z", "modified": "2019-01-22T05:56:09.000Z", "pattern": "[file:hashes.MD5 = 'e224cc017bba85f745e845b8813a914d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b079-0adc-4bfb-b79e-4ab1950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:09.000Z", "modified": "2019-01-22T05:56:09.000Z", "pattern": "[file:name = '22_Januar_2019_23_47_20_Uhr.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b07a-7588-4d4e-ae04-4471950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:10.000Z", "modified": "2019-01-22T05:56:10.000Z", "pattern": "[file:hashes.MD5 = 'e4fcebfe327689845d2913349b2fabed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b07a-9680-440a-8151-47cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:10.000Z", "modified": "2019-01-22T05:56:10.000Z", "pattern": "[file:hashes.MD5 = 'e70fe35ab4cff7f47c41383c24b8df3c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b07b-b0f4-46d3-848b-492b950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:11.000Z", "modified": "2019-01-22T05:56:11.000Z", "pattern": "[file:hashes.MD5 = 'e88435bdb7d6dfb9c5164419d6116e2a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b07b-eff4-4122-a0a5-459d950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:11.000Z", "modified": "2019-01-22T05:56:11.000Z", "pattern": "[file:hashes.MD5 = 'e8961335cc98fddb86ab179e801e785c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b07d-f658-4fb3-ae10-4414950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:13.000Z", "modified": "2019-01-22T05:56:13.000Z", "pattern": "[file:hashes.MD5 = 'ed60ceaaf08374b551c0b46bfe3dfe37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b07d-6f54-467e-8f66-4326950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:13.000Z", "modified": "2019-01-22T05:56:13.000Z", "pattern": "[file:hashes.MD5 = 'ed858987272d4fe5cd0e3efc907421d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b07e-6e24-4fac-97e7-4c11950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:14.000Z", "modified": "2019-01-22T05:56:14.000Z", "pattern": "[file:hashes.MD5 = 'f5d62ebbb58e68ef240275804ace2e4a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b07e-06c8-4524-80e7-47fc950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:14.000Z", "modified": "2019-01-22T05:56:14.000Z", "pattern": "[file:name = '22_Januar_2019_03_03_05_Uhr.doc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b07f-dac8-4ae7-8d02-458b950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:15.000Z", "modified": "2019-01-22T05:56:15.000Z", "pattern": "[file:hashes.MD5 = 'f77d9e954ff86af621b6c5102a9669fd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b07f-ec44-4525-b6b4-458a950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:15.000Z", "modified": "2019-01-22T05:56:15.000Z", "pattern": "[file:hashes.MD5 = 'fbbcb0bde319dec0f970d4437e120c99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c46b080-270c-4634-ac67-44c6950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2019-01-22T05:56:16.000Z", "modified": "2019-01-22T05:56:16.000Z", "pattern": "[file:hashes.MD5 = 'ffa3d393425fcea75a3865b43f924360']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2019-01-22T05:56:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } } ] }