9832 lines
No EOL
399 KiB
JSON
9832 lines
No EOL
399 KiB
JSON
{
|
|
"type": "bundle",
|
|
"id": "bundle--9362e0e3-62ff-475e-8d32-1ffbb5078e8d",
|
|
"objects": [
|
|
{
|
|
"type": "identity",
|
|
"spec_version": "2.1",
|
|
"id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"name": "CIRCL",
|
|
"identity_class": "organization"
|
|
},
|
|
{
|
|
"type": "report",
|
|
"spec_version": "2.1",
|
|
"id": "report--9362e0e3-62ff-475e-8d32-1ffbb5078e8d",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"name": "OSINT - Cheating the cheater: How adversaries are using backdoored video game cheat engines and modding tools",
|
|
"published": "2021-03-31T15:32:30Z",
|
|
"object_refs": [
|
|
"indicator--ca97573c-8689-4917-bb79-eb6054b7215b",
|
|
"indicator--0cbb0fd4-414c-4ab3-8e27-3dca5cce43f3",
|
|
"indicator--3b33bd04-cf7c-4d80-a4e7-35a4af66104e",
|
|
"indicator--749e7db4-9a56-41d7-8857-0a0c2a3b4e78",
|
|
"indicator--199ccf42-4249-4a55-8f44-c8fd6323de9d",
|
|
"indicator--1e71a3ad-eee3-4156-a671-b7ddceaf32b9",
|
|
"indicator--35e3ce4b-a445-42ed-a1cd-29a92fefda85",
|
|
"indicator--67d8108b-f221-4013-a86b-81f8b6722c62",
|
|
"indicator--45c93512-acc3-435b-8bde-7715dbdb409f",
|
|
"indicator--129e2ac4-95d3-4508-88c2-55638b5a68f9",
|
|
"indicator--0d3aaab8-6673-43b2-8836-2c01eab0b249",
|
|
"indicator--939aed74-a640-44a4-b724-b8446235df51",
|
|
"indicator--1806d46a-b839-4f96-9464-dae6be80f949",
|
|
"indicator--b001d449-c2b9-4ce1-a238-f332ae0c5d87",
|
|
"indicator--5629e036-3c07-4b1e-abc9-c6dac4d46e18",
|
|
"indicator--b41ccbf5-3bf7-4a37-ba41-540dd282a78c",
|
|
"indicator--c2092d30-d082-4e4f-b37e-52d7f2eeeb9e",
|
|
"indicator--0a4537de-a41d-4224-b6b0-9e7bee0a3f37",
|
|
"observed-data--f82ae3fe-7b2f-45e9-bf18-2c55b33f74e3",
|
|
"file--f82ae3fe-7b2f-45e9-bf18-2c55b33f74e3",
|
|
"observed-data--fcc7f193-dadc-4a13-9536-42905b509d7e",
|
|
"file--fcc7f193-dadc-4a13-9536-42905b509d7e",
|
|
"observed-data--dabef9c1-7266-4f19-a558-0295ed9329c8",
|
|
"file--dabef9c1-7266-4f19-a558-0295ed9329c8",
|
|
"observed-data--d864b27c-98de-49b6-9285-18e4fb8e07fd",
|
|
"file--d864b27c-98de-49b6-9285-18e4fb8e07fd",
|
|
"observed-data--a9b59980-6dfd-476f-9edd-aad00df90979",
|
|
"file--a9b59980-6dfd-476f-9edd-aad00df90979",
|
|
"observed-data--2fc973c4-a2ad-4698-b326-bc3090eda122",
|
|
"file--2fc973c4-a2ad-4698-b326-bc3090eda122",
|
|
"observed-data--1970d419-160a-4563-85b3-02f85be9c7ca",
|
|
"file--1970d419-160a-4563-85b3-02f85be9c7ca",
|
|
"observed-data--2b55ce3f-ad18-4e1e-82a9-a34e0a490132",
|
|
"file--2b55ce3f-ad18-4e1e-82a9-a34e0a490132",
|
|
"observed-data--a0b08f7e-25d0-4e0b-8e7f-5b8180011f49",
|
|
"file--a0b08f7e-25d0-4e0b-8e7f-5b8180011f49",
|
|
"observed-data--e55eda8f-796f-4be6-82ab-f6306992f277",
|
|
"file--e55eda8f-796f-4be6-82ab-f6306992f277",
|
|
"observed-data--6dc71ac6-3642-4dcc-a111-8472dceb14f7",
|
|
"file--6dc71ac6-3642-4dcc-a111-8472dceb14f7",
|
|
"observed-data--9cda5a26-478e-4fc8-9bbb-97afc80935fe",
|
|
"file--9cda5a26-478e-4fc8-9bbb-97afc80935fe",
|
|
"observed-data--96b27a5a-a140-427b-bf16-e4abfa0f059d",
|
|
"file--96b27a5a-a140-427b-bf16-e4abfa0f059d",
|
|
"observed-data--eccdb2fb-5ea4-4ff3-b1a4-0aa9b2a516b0",
|
|
"file--eccdb2fb-5ea4-4ff3-b1a4-0aa9b2a516b0",
|
|
"observed-data--8f6913ee-ed1d-412b-9983-3d88e2eee9a7",
|
|
"file--8f6913ee-ed1d-412b-9983-3d88e2eee9a7",
|
|
"observed-data--a1f54483-c294-4616-b38a-df3b5b1410d8",
|
|
"file--a1f54483-c294-4616-b38a-df3b5b1410d8",
|
|
"observed-data--6eed024f-7412-4f70-a7a6-d62e8051b358",
|
|
"file--6eed024f-7412-4f70-a7a6-d62e8051b358",
|
|
"observed-data--041c0c01-d358-4c56-b259-276f286aa778",
|
|
"file--041c0c01-d358-4c56-b259-276f286aa778",
|
|
"observed-data--fbbdeddf-b6dd-4760-aebc-a58da9fe92f2",
|
|
"file--fbbdeddf-b6dd-4760-aebc-a58da9fe92f2",
|
|
"observed-data--417f6e98-97a3-4bba-86df-05dbbdceff6f",
|
|
"file--417f6e98-97a3-4bba-86df-05dbbdceff6f",
|
|
"observed-data--9ca3f4f2-f2de-4f7a-b48e-41f38e99c649",
|
|
"file--9ca3f4f2-f2de-4f7a-b48e-41f38e99c649",
|
|
"observed-data--b6c92817-6dc1-435e-876c-58db289e3133",
|
|
"file--b6c92817-6dc1-435e-876c-58db289e3133",
|
|
"observed-data--0a35ccbf-eada-4912-87ef-56d60fa36491",
|
|
"file--0a35ccbf-eada-4912-87ef-56d60fa36491",
|
|
"observed-data--aa67f0b7-1f43-455a-b50d-ae864f58311f",
|
|
"file--aa67f0b7-1f43-455a-b50d-ae864f58311f",
|
|
"observed-data--e3bcaede-d937-4a5c-b243-fd837f68f6f1",
|
|
"file--e3bcaede-d937-4a5c-b243-fd837f68f6f1",
|
|
"observed-data--7d770020-325d-4613-b472-8785ff6630cf",
|
|
"file--7d770020-325d-4613-b472-8785ff6630cf",
|
|
"observed-data--a29e6aef-b09b-4034-ba48-4f68951ad2c5",
|
|
"file--a29e6aef-b09b-4034-ba48-4f68951ad2c5",
|
|
"observed-data--1aae7470-52c1-47fe-850d-96c53754ff63",
|
|
"file--1aae7470-52c1-47fe-850d-96c53754ff63",
|
|
"observed-data--262f912f-1fe0-44c4-aa8c-4d0f245ae54b",
|
|
"file--262f912f-1fe0-44c4-aa8c-4d0f245ae54b",
|
|
"observed-data--6b03c91b-0c9f-44c3-9d9c-cc6cf7b583de",
|
|
"file--6b03c91b-0c9f-44c3-9d9c-cc6cf7b583de",
|
|
"observed-data--93f3ae7a-2d4a-4f28-a1e2-e788b61153db",
|
|
"file--93f3ae7a-2d4a-4f28-a1e2-e788b61153db",
|
|
"observed-data--c37437ad-e3c8-4521-8c24-560d37d0b619",
|
|
"file--c37437ad-e3c8-4521-8c24-560d37d0b619",
|
|
"observed-data--c753e6a6-703b-4c8d-a1e9-7680981f8f46",
|
|
"file--c753e6a6-703b-4c8d-a1e9-7680981f8f46",
|
|
"observed-data--f8b064bd-03d6-48ad-abc3-8ccfe734cb26",
|
|
"file--f8b064bd-03d6-48ad-abc3-8ccfe734cb26",
|
|
"observed-data--320f9362-ecb6-49c5-9d3d-4a7814d3af44",
|
|
"file--320f9362-ecb6-49c5-9d3d-4a7814d3af44",
|
|
"observed-data--0dc06091-5d92-433a-8dbc-ec1fd048bf3f",
|
|
"file--0dc06091-5d92-433a-8dbc-ec1fd048bf3f",
|
|
"observed-data--7ff5c094-aca5-4774-8558-f0186d50dafd",
|
|
"file--7ff5c094-aca5-4774-8558-f0186d50dafd",
|
|
"observed-data--9662a0b0-387c-4147-9b60-5d42093278b7",
|
|
"file--9662a0b0-387c-4147-9b60-5d42093278b7",
|
|
"observed-data--a2662416-5f7f-46f4-9de4-adb8c337660c",
|
|
"file--a2662416-5f7f-46f4-9de4-adb8c337660c",
|
|
"observed-data--2d323d54-41eb-4a5d-8e34-6c8577201278",
|
|
"file--2d323d54-41eb-4a5d-8e34-6c8577201278",
|
|
"observed-data--43fc816a-08fe-4f87-8a9a-85a26459b893",
|
|
"file--43fc816a-08fe-4f87-8a9a-85a26459b893",
|
|
"observed-data--cfa66628-1cdb-44ac-a8a2-48871057869c",
|
|
"file--cfa66628-1cdb-44ac-a8a2-48871057869c",
|
|
"observed-data--5544dc00-9e7c-4cdd-bb8d-0e44b58790e5",
|
|
"file--5544dc00-9e7c-4cdd-bb8d-0e44b58790e5",
|
|
"observed-data--2d560534-a75b-4c6d-8bda-754e3a852bed",
|
|
"file--2d560534-a75b-4c6d-8bda-754e3a852bed",
|
|
"observed-data--bd4b3e13-8cf6-47ec-9ee5-05cf7495d34e",
|
|
"file--bd4b3e13-8cf6-47ec-9ee5-05cf7495d34e",
|
|
"observed-data--914fe087-96f0-44e8-948e-9f8ba343959c",
|
|
"file--914fe087-96f0-44e8-948e-9f8ba343959c",
|
|
"observed-data--eb76e892-a96f-4c5a-8428-3409733f7c78",
|
|
"file--eb76e892-a96f-4c5a-8428-3409733f7c78",
|
|
"observed-data--a5e718a0-bafb-4401-8edc-9a3251c27864",
|
|
"file--a5e718a0-bafb-4401-8edc-9a3251c27864",
|
|
"observed-data--ccb6934c-d265-4622-92ab-787fca873218",
|
|
"file--ccb6934c-d265-4622-92ab-787fca873218",
|
|
"observed-data--95b37787-27a5-4faa-a12a-b454c748d091",
|
|
"file--95b37787-27a5-4faa-a12a-b454c748d091",
|
|
"observed-data--31a188bf-be00-49f3-a1f8-42a810f86fc9",
|
|
"file--31a188bf-be00-49f3-a1f8-42a810f86fc9",
|
|
"observed-data--27c3322b-6044-4fc8-9514-9a5c8e397058",
|
|
"file--27c3322b-6044-4fc8-9514-9a5c8e397058",
|
|
"observed-data--4975837a-ddb6-40b3-9107-1b60798e8c12",
|
|
"file--4975837a-ddb6-40b3-9107-1b60798e8c12",
|
|
"observed-data--80859c2a-8d87-401c-811c-57f84ad51f8d",
|
|
"file--80859c2a-8d87-401c-811c-57f84ad51f8d",
|
|
"observed-data--a8fe17b3-4f10-454e-bee6-487504042b63",
|
|
"file--a8fe17b3-4f10-454e-bee6-487504042b63",
|
|
"observed-data--4df978d7-caa2-4d27-8615-4e521d010f33",
|
|
"file--4df978d7-caa2-4d27-8615-4e521d010f33",
|
|
"observed-data--e7c68daf-a9ab-44e8-a2ae-556fcd1a553c",
|
|
"file--e7c68daf-a9ab-44e8-a2ae-556fcd1a553c",
|
|
"observed-data--0ac976bd-8695-4297-9f1a-1de390033bdd",
|
|
"file--0ac976bd-8695-4297-9f1a-1de390033bdd",
|
|
"observed-data--07b351b9-26cc-4b1b-9268-eacaae4ae66e",
|
|
"file--07b351b9-26cc-4b1b-9268-eacaae4ae66e",
|
|
"observed-data--2babc83d-c550-4c18-a900-6c69c77abb6a",
|
|
"file--2babc83d-c550-4c18-a900-6c69c77abb6a",
|
|
"observed-data--1151b6d6-db68-494a-aa38-84872e5dc949",
|
|
"file--1151b6d6-db68-494a-aa38-84872e5dc949",
|
|
"observed-data--3e47f9c9-75ec-4316-9d67-8cf8af5f8a9e",
|
|
"file--3e47f9c9-75ec-4316-9d67-8cf8af5f8a9e",
|
|
"observed-data--f05597e9-4b09-47b3-bad2-26502b8e5d2b",
|
|
"file--f05597e9-4b09-47b3-bad2-26502b8e5d2b",
|
|
"observed-data--9e4213ca-4a2b-4e25-9765-ae1a614a692e",
|
|
"file--9e4213ca-4a2b-4e25-9765-ae1a614a692e",
|
|
"observed-data--8463e948-8070-4b7a-b2d6-214fdd29194f",
|
|
"file--8463e948-8070-4b7a-b2d6-214fdd29194f",
|
|
"observed-data--37b08f06-a79a-4a2b-a20c-34dcfaf74f64",
|
|
"file--37b08f06-a79a-4a2b-a20c-34dcfaf74f64",
|
|
"observed-data--f3944187-f5eb-441b-8895-9307f921ab3f",
|
|
"file--f3944187-f5eb-441b-8895-9307f921ab3f",
|
|
"observed-data--7ed6ed10-ec2b-449f-a6c8-4d38705bbdbd",
|
|
"file--7ed6ed10-ec2b-449f-a6c8-4d38705bbdbd",
|
|
"observed-data--1dbb4b08-e15e-453c-bea6-702fba435d92",
|
|
"file--1dbb4b08-e15e-453c-bea6-702fba435d92",
|
|
"observed-data--be644923-a2a6-41bb-b5fb-b66e46e30b64",
|
|
"file--be644923-a2a6-41bb-b5fb-b66e46e30b64",
|
|
"observed-data--134d06ef-89dc-4267-a40a-549a6d31825e",
|
|
"file--134d06ef-89dc-4267-a40a-549a6d31825e",
|
|
"observed-data--cc6bd258-7f43-49cb-809d-219ead4c3722",
|
|
"file--cc6bd258-7f43-49cb-809d-219ead4c3722",
|
|
"observed-data--badb48c7-37a4-453f-9be9-b5e3beef4506",
|
|
"file--badb48c7-37a4-453f-9be9-b5e3beef4506",
|
|
"observed-data--1416cc2f-411a-49c5-87e3-dc224a116a99",
|
|
"file--1416cc2f-411a-49c5-87e3-dc224a116a99",
|
|
"observed-data--45652632-90cb-4e1a-add9-d669ddd74f52",
|
|
"file--45652632-90cb-4e1a-add9-d669ddd74f52",
|
|
"observed-data--24ed51c4-e299-42cc-9c84-68c31b179584",
|
|
"file--24ed51c4-e299-42cc-9c84-68c31b179584",
|
|
"observed-data--c8e708b6-2c2e-43f9-bef9-13b5103908d1",
|
|
"file--c8e708b6-2c2e-43f9-bef9-13b5103908d1",
|
|
"observed-data--e6cd68a3-f4d6-442b-9b9e-c3b2f40a58f1",
|
|
"file--e6cd68a3-f4d6-442b-9b9e-c3b2f40a58f1",
|
|
"observed-data--017f9d32-03b6-4cb3-9066-7c29efc3bc8c",
|
|
"file--017f9d32-03b6-4cb3-9066-7c29efc3bc8c",
|
|
"observed-data--00ceabf5-8361-4c0c-bee3-d56b7b2b800c",
|
|
"file--00ceabf5-8361-4c0c-bee3-d56b7b2b800c",
|
|
"observed-data--347ef89f-cecb-4f7e-a5e2-1c91cc23e74d",
|
|
"file--347ef89f-cecb-4f7e-a5e2-1c91cc23e74d",
|
|
"observed-data--5702b64d-d4a0-4f85-aee3-ce85a48f2490",
|
|
"file--5702b64d-d4a0-4f85-aee3-ce85a48f2490",
|
|
"observed-data--8963b433-0fbb-4730-bade-f457b4572c58",
|
|
"file--8963b433-0fbb-4730-bade-f457b4572c58",
|
|
"observed-data--e73f89c2-6ee9-4558-84ec-e58f141b6d5e",
|
|
"file--e73f89c2-6ee9-4558-84ec-e58f141b6d5e",
|
|
"observed-data--a1c74d7d-878f-4b3c-82b4-7f3d4e4788fd",
|
|
"file--a1c74d7d-878f-4b3c-82b4-7f3d4e4788fd",
|
|
"observed-data--dc8cb640-438c-40e1-b2e5-20a7f65f2b4e",
|
|
"file--dc8cb640-438c-40e1-b2e5-20a7f65f2b4e",
|
|
"observed-data--51a89789-c3a0-4643-b0f2-471bc10d0608",
|
|
"file--51a89789-c3a0-4643-b0f2-471bc10d0608",
|
|
"observed-data--ed968753-7bb3-4cac-aaa0-a3312e283ecd",
|
|
"file--ed968753-7bb3-4cac-aaa0-a3312e283ecd",
|
|
"observed-data--53be3eac-43c8-4361-9e1c-bcaea232eea7",
|
|
"file--53be3eac-43c8-4361-9e1c-bcaea232eea7",
|
|
"observed-data--8f70127c-d597-4ba4-a2da-4749301809bc",
|
|
"file--8f70127c-d597-4ba4-a2da-4749301809bc",
|
|
"observed-data--ddd37c4a-635e-4b99-8bc4-4b4ac9359abd",
|
|
"file--ddd37c4a-635e-4b99-8bc4-4b4ac9359abd",
|
|
"observed-data--7453c13a-67d3-4977-983d-2ac981b055dc",
|
|
"file--7453c13a-67d3-4977-983d-2ac981b055dc",
|
|
"observed-data--69d65a89-fb9d-45d4-8045-c00f7cf3df58",
|
|
"file--69d65a89-fb9d-45d4-8045-c00f7cf3df58",
|
|
"observed-data--e2c73f25-1310-4e18-90dd-9f7d2f8b50aa",
|
|
"file--e2c73f25-1310-4e18-90dd-9f7d2f8b50aa",
|
|
"observed-data--8b838279-0c8b-41ee-9584-7e37322960f7",
|
|
"file--8b838279-0c8b-41ee-9584-7e37322960f7",
|
|
"observed-data--88537d20-9383-4da4-a520-2d32e73c9ade",
|
|
"file--88537d20-9383-4da4-a520-2d32e73c9ade",
|
|
"observed-data--7e967d55-ff8f-4951-aca8-344b01c5e3e4",
|
|
"file--7e967d55-ff8f-4951-aca8-344b01c5e3e4",
|
|
"observed-data--dec5ec7a-410a-447f-8dea-008a726f4bd2",
|
|
"file--dec5ec7a-410a-447f-8dea-008a726f4bd2",
|
|
"observed-data--78bce9cf-280c-498f-a292-072544de466e",
|
|
"file--78bce9cf-280c-498f-a292-072544de466e",
|
|
"observed-data--33a62c11-7ffc-4eda-83d4-e0dbc1069eb9",
|
|
"file--33a62c11-7ffc-4eda-83d4-e0dbc1069eb9",
|
|
"observed-data--620bc29b-145c-4730-b4da-611c28ed22b1",
|
|
"file--620bc29b-145c-4730-b4da-611c28ed22b1",
|
|
"observed-data--d99cabf1-f5a2-44df-a014-71adfdf1b53c",
|
|
"file--d99cabf1-f5a2-44df-a014-71adfdf1b53c",
|
|
"observed-data--00d897d6-12f9-417e-a333-27d60cf4e4c9",
|
|
"file--00d897d6-12f9-417e-a333-27d60cf4e4c9",
|
|
"observed-data--8c752595-2f48-45b5-8ec9-1531f5cb885a",
|
|
"file--8c752595-2f48-45b5-8ec9-1531f5cb885a",
|
|
"observed-data--38410e47-85a0-44b0-89e9-addb782d4e02",
|
|
"file--38410e47-85a0-44b0-89e9-addb782d4e02",
|
|
"observed-data--01bc9d0a-7cec-4720-9cf6-083c781600ac",
|
|
"file--01bc9d0a-7cec-4720-9cf6-083c781600ac",
|
|
"observed-data--ba16f230-45f4-4c82-aacf-4593a4fa25e0",
|
|
"file--ba16f230-45f4-4c82-aacf-4593a4fa25e0",
|
|
"observed-data--5bfcba86-d40d-4fec-acf4-e411c1099e93",
|
|
"file--5bfcba86-d40d-4fec-acf4-e411c1099e93",
|
|
"observed-data--69f54b06-20dd-465c-9f7e-49a7f171d677",
|
|
"file--69f54b06-20dd-465c-9f7e-49a7f171d677",
|
|
"observed-data--76543f65-d971-4dec-8897-a388edd9936c",
|
|
"file--76543f65-d971-4dec-8897-a388edd9936c",
|
|
"observed-data--ab1c2d9a-753d-4182-83d3-28800fddc2f2",
|
|
"file--ab1c2d9a-753d-4182-83d3-28800fddc2f2",
|
|
"observed-data--a94fb3ed-9d8a-4c16-bfd0-f885aef634d3",
|
|
"file--a94fb3ed-9d8a-4c16-bfd0-f885aef634d3",
|
|
"observed-data--3ea7f09e-9a0a-4fee-8e99-c463795fc40f",
|
|
"file--3ea7f09e-9a0a-4fee-8e99-c463795fc40f",
|
|
"observed-data--e83d4bd1-28f6-4ef0-a2c6-6ea6f34f8397",
|
|
"file--e83d4bd1-28f6-4ef0-a2c6-6ea6f34f8397",
|
|
"observed-data--bd3ca8ef-10b4-4986-a41e-5fa8ea92a64d",
|
|
"file--bd3ca8ef-10b4-4986-a41e-5fa8ea92a64d",
|
|
"observed-data--21e292f0-303a-4fe5-bf39-5de7fd087e01",
|
|
"file--21e292f0-303a-4fe5-bf39-5de7fd087e01",
|
|
"observed-data--201b890b-be02-482d-a6ac-fd2db2dbec45",
|
|
"file--201b890b-be02-482d-a6ac-fd2db2dbec45",
|
|
"observed-data--4260cb4c-ffc1-4807-808e-1e05e31709a6",
|
|
"file--4260cb4c-ffc1-4807-808e-1e05e31709a6",
|
|
"observed-data--157c2b6b-3f8f-42b7-b656-7b49499588a8",
|
|
"file--157c2b6b-3f8f-42b7-b656-7b49499588a8",
|
|
"observed-data--53ed53c2-c01c-4ea2-b4bc-7e6f9374900f",
|
|
"file--53ed53c2-c01c-4ea2-b4bc-7e6f9374900f",
|
|
"observed-data--043d3cce-129a-4217-ac58-86dea5e92b75",
|
|
"file--043d3cce-129a-4217-ac58-86dea5e92b75",
|
|
"observed-data--0d9aa573-f43d-4ba2-b80f-7a6007a48dee",
|
|
"file--0d9aa573-f43d-4ba2-b80f-7a6007a48dee",
|
|
"observed-data--576c66b5-34dc-478a-8fd8-aa5bad4081fb",
|
|
"file--576c66b5-34dc-478a-8fd8-aa5bad4081fb",
|
|
"observed-data--c2037484-bed4-4eb7-9506-498474e87039",
|
|
"file--c2037484-bed4-4eb7-9506-498474e87039",
|
|
"observed-data--7e658b78-9798-4608-bf91-f88bf8042646",
|
|
"file--7e658b78-9798-4608-bf91-f88bf8042646",
|
|
"observed-data--7b0acbe8-4a6e-4c90-8d85-50db5924b9fc",
|
|
"file--7b0acbe8-4a6e-4c90-8d85-50db5924b9fc",
|
|
"observed-data--a954af5d-5157-490d-9f2e-c56d3ba8153e",
|
|
"file--a954af5d-5157-490d-9f2e-c56d3ba8153e",
|
|
"observed-data--975570f4-bf7a-4281-94f7-1d73a77f4ec0",
|
|
"file--975570f4-bf7a-4281-94f7-1d73a77f4ec0",
|
|
"observed-data--e7586da2-c0ec-4627-8dd3-d7238882d7ba",
|
|
"file--e7586da2-c0ec-4627-8dd3-d7238882d7ba",
|
|
"observed-data--e221f6e2-ede8-4f99-9dcb-e087536252db",
|
|
"file--e221f6e2-ede8-4f99-9dcb-e087536252db",
|
|
"observed-data--40e5c04d-e581-4b47-878e-4acd4bc4b274",
|
|
"file--40e5c04d-e581-4b47-878e-4acd4bc4b274",
|
|
"observed-data--69a29e8e-3bec-4ec7-b950-d31ec0657e90",
|
|
"file--69a29e8e-3bec-4ec7-b950-d31ec0657e90",
|
|
"observed-data--59cf9e74-9841-4838-864a-212e73b851fc",
|
|
"file--59cf9e74-9841-4838-864a-212e73b851fc",
|
|
"observed-data--2767634e-da83-4344-b9ca-12e666cd621e",
|
|
"file--2767634e-da83-4344-b9ca-12e666cd621e",
|
|
"observed-data--c51e898d-72b1-484f-a5f8-a18f48094f7a",
|
|
"file--c51e898d-72b1-484f-a5f8-a18f48094f7a",
|
|
"observed-data--4d523df8-ad17-448d-9b94-a3338148c729",
|
|
"file--4d523df8-ad17-448d-9b94-a3338148c729",
|
|
"observed-data--99c6502f-7d64-4bf7-ae7e-ef62cf64c29b",
|
|
"file--99c6502f-7d64-4bf7-ae7e-ef62cf64c29b",
|
|
"observed-data--818b463b-9a61-47a9-af0b-f10506bc7901",
|
|
"file--818b463b-9a61-47a9-af0b-f10506bc7901",
|
|
"observed-data--add41fc6-4637-4f60-a65c-4c18ffe38036",
|
|
"file--add41fc6-4637-4f60-a65c-4c18ffe38036",
|
|
"observed-data--057e2d02-cf69-49f1-895f-1afa8f98a00d",
|
|
"file--057e2d02-cf69-49f1-895f-1afa8f98a00d",
|
|
"observed-data--72f5e386-6e73-42b3-8fb2-0c373d2735f3",
|
|
"file--72f5e386-6e73-42b3-8fb2-0c373d2735f3",
|
|
"observed-data--73b393de-0c82-4f7c-8fd3-a5b9255fd096",
|
|
"file--73b393de-0c82-4f7c-8fd3-a5b9255fd096",
|
|
"observed-data--19b51de2-5178-498f-a5a6-ce38790ad8de",
|
|
"file--19b51de2-5178-498f-a5a6-ce38790ad8de",
|
|
"observed-data--c4c6bb81-8e68-4a4b-944c-d222dcc2088b",
|
|
"file--c4c6bb81-8e68-4a4b-944c-d222dcc2088b",
|
|
"observed-data--caf011df-9dc6-4ac5-927d-ac7e6736aa6b",
|
|
"file--caf011df-9dc6-4ac5-927d-ac7e6736aa6b",
|
|
"observed-data--e326e2a4-9dc5-4664-a1e4-7988d17fe59e",
|
|
"file--e326e2a4-9dc5-4664-a1e4-7988d17fe59e",
|
|
"observed-data--ccb4525a-72ba-4161-8eba-434f08a9d5d7",
|
|
"file--ccb4525a-72ba-4161-8eba-434f08a9d5d7",
|
|
"observed-data--a592c54e-ca74-47de-bee0-21529ae0d611",
|
|
"file--a592c54e-ca74-47de-bee0-21529ae0d611",
|
|
"observed-data--25efabc1-05b6-47aa-a32f-5a6c8ff54ba3",
|
|
"file--25efabc1-05b6-47aa-a32f-5a6c8ff54ba3",
|
|
"observed-data--7aba8228-4077-4cac-b6db-2916d7888cf2",
|
|
"file--7aba8228-4077-4cac-b6db-2916d7888cf2",
|
|
"observed-data--c4a9911c-0918-4326-b400-5d721f644440",
|
|
"file--c4a9911c-0918-4326-b400-5d721f644440",
|
|
"observed-data--f4b269d8-8217-4412-bd99-26200157afbf",
|
|
"file--f4b269d8-8217-4412-bd99-26200157afbf",
|
|
"observed-data--cc304b30-a9bf-4d9e-bd21-d99c854445c6",
|
|
"file--cc304b30-a9bf-4d9e-bd21-d99c854445c6",
|
|
"observed-data--0bca24aa-5706-40a6-b008-821bf34b0c57",
|
|
"file--0bca24aa-5706-40a6-b008-821bf34b0c57",
|
|
"observed-data--5321fa26-caf6-4455-a8cc-38900e8a5ad1",
|
|
"file--5321fa26-caf6-4455-a8cc-38900e8a5ad1",
|
|
"observed-data--a7708f5e-9f15-4351-81f2-3f9226cc8435",
|
|
"file--a7708f5e-9f15-4351-81f2-3f9226cc8435",
|
|
"observed-data--0e7fb73e-995e-4d97-97a8-0ac702a0826a",
|
|
"file--0e7fb73e-995e-4d97-97a8-0ac702a0826a",
|
|
"observed-data--215f6c64-468c-4c67-ba06-1afbb7b20b48",
|
|
"file--215f6c64-468c-4c67-ba06-1afbb7b20b48",
|
|
"observed-data--e40ce846-3560-4ad4-b24a-383bcb3260e1",
|
|
"file--e40ce846-3560-4ad4-b24a-383bcb3260e1",
|
|
"observed-data--301ef60b-0b1d-4735-a122-ac7aa543ecf2",
|
|
"file--301ef60b-0b1d-4735-a122-ac7aa543ecf2",
|
|
"observed-data--1345cf51-1063-4683-9d37-dab3aa2310b0",
|
|
"file--1345cf51-1063-4683-9d37-dab3aa2310b0",
|
|
"observed-data--b02a62d8-3bfa-4939-ad0f-86006b7fbdb2",
|
|
"file--b02a62d8-3bfa-4939-ad0f-86006b7fbdb2",
|
|
"observed-data--ceafc0ac-6da0-43fc-b3ab-3093188a69fe",
|
|
"file--ceafc0ac-6da0-43fc-b3ab-3093188a69fe",
|
|
"observed-data--bb7a1f5d-8cd7-457e-9ec0-6f5808e70ca2",
|
|
"file--bb7a1f5d-8cd7-457e-9ec0-6f5808e70ca2",
|
|
"observed-data--77f3b013-739c-4f29-94e5-556b749a0f53",
|
|
"file--77f3b013-739c-4f29-94e5-556b749a0f53",
|
|
"observed-data--4280fc07-0c53-4cb5-ac7e-3740c6c1554a",
|
|
"file--4280fc07-0c53-4cb5-ac7e-3740c6c1554a",
|
|
"observed-data--8091bcbd-b968-433e-b348-6a77fa26b61e",
|
|
"file--8091bcbd-b968-433e-b348-6a77fa26b61e",
|
|
"observed-data--8fc50598-5bee-4036-bf85-d5278145521f",
|
|
"file--8fc50598-5bee-4036-bf85-d5278145521f",
|
|
"observed-data--01e06b30-61bc-425a-873e-b72ad75ee3e2",
|
|
"file--01e06b30-61bc-425a-873e-b72ad75ee3e2",
|
|
"observed-data--29afef9f-184d-4f35-b98f-a8abd995bb64",
|
|
"file--29afef9f-184d-4f35-b98f-a8abd995bb64",
|
|
"observed-data--856915a7-c3f4-406a-a65f-bafa07323c7c",
|
|
"file--856915a7-c3f4-406a-a65f-bafa07323c7c",
|
|
"observed-data--55c51215-83ae-4b66-98f1-a0f39828e7ec",
|
|
"file--55c51215-83ae-4b66-98f1-a0f39828e7ec",
|
|
"observed-data--4290dd7c-5e3e-47ba-833f-53049f5716e1",
|
|
"file--4290dd7c-5e3e-47ba-833f-53049f5716e1",
|
|
"observed-data--2b6369b8-1cb7-44f4-af4b-05cdd0f9c3b2",
|
|
"file--2b6369b8-1cb7-44f4-af4b-05cdd0f9c3b2",
|
|
"observed-data--036e290d-258a-439b-a1af-12f66655bc30",
|
|
"file--036e290d-258a-439b-a1af-12f66655bc30",
|
|
"observed-data--60b2e835-b8d7-4488-aba4-13d76745ee12",
|
|
"file--60b2e835-b8d7-4488-aba4-13d76745ee12",
|
|
"observed-data--455ca6e2-3994-479c-8c58-d6efb9e78c55",
|
|
"file--455ca6e2-3994-479c-8c58-d6efb9e78c55",
|
|
"observed-data--974943cd-4acd-4f61-a746-cafe0d102692",
|
|
"file--974943cd-4acd-4f61-a746-cafe0d102692",
|
|
"observed-data--88b0bace-422d-4f94-a2e7-b13705e65029",
|
|
"file--88b0bace-422d-4f94-a2e7-b13705e65029",
|
|
"observed-data--492ad67e-8b0c-4170-816d-999fa98841d3",
|
|
"file--492ad67e-8b0c-4170-816d-999fa98841d3",
|
|
"observed-data--d666c232-909d-4da2-b48f-895e68f1e3a9",
|
|
"file--d666c232-909d-4da2-b48f-895e68f1e3a9",
|
|
"observed-data--47efee67-40f4-4eff-bbaa-82a79e0d6c18",
|
|
"file--47efee67-40f4-4eff-bbaa-82a79e0d6c18",
|
|
"observed-data--274f792d-7734-44e6-9293-bbfd4d4fb7ce",
|
|
"file--274f792d-7734-44e6-9293-bbfd4d4fb7ce",
|
|
"observed-data--5519f369-5fc1-4237-abe9-995700169877",
|
|
"file--5519f369-5fc1-4237-abe9-995700169877",
|
|
"observed-data--896710a4-b31b-4828-9a5a-ddc0ac07d4e3",
|
|
"file--896710a4-b31b-4828-9a5a-ddc0ac07d4e3",
|
|
"observed-data--79cd7e25-c4e3-4954-9971-d85ed5717f46",
|
|
"file--79cd7e25-c4e3-4954-9971-d85ed5717f46",
|
|
"observed-data--79e89051-663f-4507-8855-17ea5e8fe260",
|
|
"file--79e89051-663f-4507-8855-17ea5e8fe260",
|
|
"observed-data--c84602c1-7356-414a-aa72-59b4d4b8de16",
|
|
"file--c84602c1-7356-414a-aa72-59b4d4b8de16",
|
|
"observed-data--db1f6d21-b287-4535-90aa-2003afa1cff9",
|
|
"file--db1f6d21-b287-4535-90aa-2003afa1cff9",
|
|
"observed-data--0f8d800f-770f-47f6-82c4-d4b1a472b33a",
|
|
"file--0f8d800f-770f-47f6-82c4-d4b1a472b33a",
|
|
"observed-data--c92d5e1a-7778-4638-9a56-45a2242eaaa6",
|
|
"file--c92d5e1a-7778-4638-9a56-45a2242eaaa6",
|
|
"observed-data--d18dcf59-4e53-4c3a-bdcf-2770c9c3b0be",
|
|
"file--d18dcf59-4e53-4c3a-bdcf-2770c9c3b0be",
|
|
"observed-data--1569fbb6-1765-492a-af95-34680114102a",
|
|
"file--1569fbb6-1765-492a-af95-34680114102a",
|
|
"observed-data--87a17e7f-a93e-4d90-bfe6-490c2612ba87",
|
|
"file--87a17e7f-a93e-4d90-bfe6-490c2612ba87",
|
|
"observed-data--8c005e11-e2d7-4cb3-9d08-d81a8053a9d7",
|
|
"file--8c005e11-e2d7-4cb3-9d08-d81a8053a9d7",
|
|
"observed-data--6031f779-8263-4223-8780-d800991391e5",
|
|
"file--6031f779-8263-4223-8780-d800991391e5",
|
|
"observed-data--37d292b0-327a-4fee-a17e-a1ae5c2989ff",
|
|
"file--37d292b0-327a-4fee-a17e-a1ae5c2989ff",
|
|
"observed-data--d6480990-b6b3-459e-9bc6-3de1086c680f",
|
|
"file--d6480990-b6b3-459e-9bc6-3de1086c680f",
|
|
"observed-data--0674439c-b814-4b6d-a16a-84c0f5b8e75b",
|
|
"file--0674439c-b814-4b6d-a16a-84c0f5b8e75b",
|
|
"observed-data--638d37c3-5ead-496a-88d4-a824052ec95f",
|
|
"file--638d37c3-5ead-496a-88d4-a824052ec95f",
|
|
"observed-data--084f4888-4e5c-4591-9eb9-092dbcb97e75",
|
|
"file--084f4888-4e5c-4591-9eb9-092dbcb97e75",
|
|
"observed-data--fdce10ad-b012-4129-8014-f77ddf94c744",
|
|
"file--fdce10ad-b012-4129-8014-f77ddf94c744",
|
|
"observed-data--bebb6bc1-ffcd-415a-9d93-a2eea7709b35",
|
|
"file--bebb6bc1-ffcd-415a-9d93-a2eea7709b35",
|
|
"observed-data--02975d10-4674-4ba7-a0e8-550fcf33c256",
|
|
"file--02975d10-4674-4ba7-a0e8-550fcf33c256",
|
|
"observed-data--6a4b9e7e-e06a-4224-8e43-630507ca8630",
|
|
"file--6a4b9e7e-e06a-4224-8e43-630507ca8630",
|
|
"observed-data--e398366f-3146-4959-a817-a571130ad8dc",
|
|
"file--e398366f-3146-4959-a817-a571130ad8dc",
|
|
"observed-data--1ee15475-8039-4a94-8113-a22bdbc325c8",
|
|
"file--1ee15475-8039-4a94-8113-a22bdbc325c8",
|
|
"observed-data--02b984d7-d279-4c88-853d-1b86210ad3e6",
|
|
"file--02b984d7-d279-4c88-853d-1b86210ad3e6",
|
|
"observed-data--2595343d-d713-4091-8636-a9fb8be5754a",
|
|
"file--2595343d-d713-4091-8636-a9fb8be5754a",
|
|
"observed-data--b216591a-e853-4071-ab31-91d10b7767ec",
|
|
"file--b216591a-e853-4071-ab31-91d10b7767ec",
|
|
"observed-data--87917b7e-58d1-4a96-881c-62b357867edb",
|
|
"file--87917b7e-58d1-4a96-881c-62b357867edb",
|
|
"observed-data--4d06adaa-cc4c-4769-a187-3a4e7e1d9c84",
|
|
"file--4d06adaa-cc4c-4769-a187-3a4e7e1d9c84",
|
|
"observed-data--87ba44db-8fee-4a7f-bef6-2102262cdc41",
|
|
"file--87ba44db-8fee-4a7f-bef6-2102262cdc41",
|
|
"observed-data--43825e93-e602-4164-b63d-908ea6dc93a9",
|
|
"file--43825e93-e602-4164-b63d-908ea6dc93a9",
|
|
"observed-data--4166c5ef-6e02-4505-a033-c5e4679ae534",
|
|
"file--4166c5ef-6e02-4505-a033-c5e4679ae534",
|
|
"observed-data--9d65a086-e458-451f-803e-407ded03111b",
|
|
"file--9d65a086-e458-451f-803e-407ded03111b",
|
|
"observed-data--9bc82521-aa70-41e6-92dc-ce5fc272637e",
|
|
"file--9bc82521-aa70-41e6-92dc-ce5fc272637e",
|
|
"observed-data--2bcd7ad7-1d2d-473c-8195-f2c38a7cae02",
|
|
"file--2bcd7ad7-1d2d-473c-8195-f2c38a7cae02",
|
|
"observed-data--f122fde6-b6ea-41f0-9dcb-d1c1c68a722a",
|
|
"file--f122fde6-b6ea-41f0-9dcb-d1c1c68a722a",
|
|
"observed-data--fa86be3e-1ff1-400f-ada4-5c966517529b",
|
|
"file--fa86be3e-1ff1-400f-ada4-5c966517529b",
|
|
"observed-data--25b14ef8-2af4-4b53-b1b3-0085aa53881c",
|
|
"file--25b14ef8-2af4-4b53-b1b3-0085aa53881c",
|
|
"observed-data--1891f4df-1720-4d9d-8f9d-a28b95c998d2",
|
|
"file--1891f4df-1720-4d9d-8f9d-a28b95c998d2",
|
|
"observed-data--482d7a88-a48c-4fea-bb20-39ba94801481",
|
|
"file--482d7a88-a48c-4fea-bb20-39ba94801481",
|
|
"observed-data--a16f78cc-faad-4d1a-9b36-4f35f0dd17d1",
|
|
"file--a16f78cc-faad-4d1a-9b36-4f35f0dd17d1",
|
|
"observed-data--eb8e10be-a898-491d-bec5-f0175549c503",
|
|
"file--eb8e10be-a898-491d-bec5-f0175549c503",
|
|
"observed-data--58b27aa9-1f7a-423b-9881-31eae626777c",
|
|
"file--58b27aa9-1f7a-423b-9881-31eae626777c",
|
|
"observed-data--1ffa57b1-5039-4b8e-a786-544384b07cd3",
|
|
"file--1ffa57b1-5039-4b8e-a786-544384b07cd3",
|
|
"observed-data--02e43f70-f7c7-4c94-9c03-df37379fa33f",
|
|
"file--02e43f70-f7c7-4c94-9c03-df37379fa33f",
|
|
"observed-data--3179fa83-d80a-4256-94e0-2595d956a0c5",
|
|
"file--3179fa83-d80a-4256-94e0-2595d956a0c5",
|
|
"observed-data--0816347e-76a0-4593-9182-f18b63f130a8",
|
|
"file--0816347e-76a0-4593-9182-f18b63f130a8",
|
|
"observed-data--ace84319-5096-4dcb-a8a7-ae582d8274c0",
|
|
"file--ace84319-5096-4dcb-a8a7-ae582d8274c0",
|
|
"observed-data--80fe7685-75f7-405d-ba94-7a57b16b1045",
|
|
"file--80fe7685-75f7-405d-ba94-7a57b16b1045",
|
|
"observed-data--d2c83a75-3ff2-41d6-884c-e4c85f213987",
|
|
"file--d2c83a75-3ff2-41d6-884c-e4c85f213987",
|
|
"observed-data--98689855-44ca-4593-a566-f8a915499071",
|
|
"file--98689855-44ca-4593-a566-f8a915499071",
|
|
"observed-data--89150848-1e6d-49b1-be6a-479ba403d202",
|
|
"file--89150848-1e6d-49b1-be6a-479ba403d202",
|
|
"observed-data--ffa23f9d-1d27-4a87-8a4c-72dda230d902",
|
|
"file--ffa23f9d-1d27-4a87-8a4c-72dda230d902",
|
|
"observed-data--c19bf317-85ea-41c7-8156-7d8888b0def5",
|
|
"file--c19bf317-85ea-41c7-8156-7d8888b0def5",
|
|
"observed-data--56074d03-b956-4d85-8b60-ef032b09532c",
|
|
"file--56074d03-b956-4d85-8b60-ef032b09532c",
|
|
"observed-data--e3c5b20b-8fb2-4e08-b333-538916793cad",
|
|
"file--e3c5b20b-8fb2-4e08-b333-538916793cad",
|
|
"observed-data--926e5ce0-f5fb-4c35-82f6-d6d1c30f02cf",
|
|
"file--926e5ce0-f5fb-4c35-82f6-d6d1c30f02cf",
|
|
"observed-data--5f82357c-000a-4bc5-9000-e9ba1546d737",
|
|
"file--5f82357c-000a-4bc5-9000-e9ba1546d737",
|
|
"observed-data--bf9c24c8-8fd3-4dec-ac34-cbc18299fad9",
|
|
"file--bf9c24c8-8fd3-4dec-ac34-cbc18299fad9",
|
|
"observed-data--1bb63928-59af-4273-bf20-85e802d0504a",
|
|
"file--1bb63928-59af-4273-bf20-85e802d0504a",
|
|
"observed-data--1be05608-873a-4b4b-af77-8e1ac46020f5",
|
|
"file--1be05608-873a-4b4b-af77-8e1ac46020f5",
|
|
"observed-data--3b538af6-43a4-4c7e-97fb-c44c5d226509",
|
|
"file--3b538af6-43a4-4c7e-97fb-c44c5d226509",
|
|
"observed-data--41f55705-5612-4888-adf6-0beb04295ee4",
|
|
"file--41f55705-5612-4888-adf6-0beb04295ee4",
|
|
"observed-data--68d803fe-3754-4d9d-a47e-e2f2bd0c2119",
|
|
"file--68d803fe-3754-4d9d-a47e-e2f2bd0c2119",
|
|
"observed-data--d8dcbad9-716e-4f8c-a032-c0ec997b313e",
|
|
"file--d8dcbad9-716e-4f8c-a032-c0ec997b313e",
|
|
"observed-data--f10c1500-e850-4f53-bf5f-4a8b923cfa05",
|
|
"file--f10c1500-e850-4f53-bf5f-4a8b923cfa05",
|
|
"observed-data--91437f5c-636a-4433-a7f2-6d7672787f13",
|
|
"file--91437f5c-636a-4433-a7f2-6d7672787f13",
|
|
"observed-data--605accde-6f3c-4394-8676-cf9534d45236",
|
|
"file--605accde-6f3c-4394-8676-cf9534d45236",
|
|
"observed-data--a4b05641-a6f6-4b4a-befb-ab3e7cada1cc",
|
|
"file--a4b05641-a6f6-4b4a-befb-ab3e7cada1cc",
|
|
"observed-data--0570592b-859d-45c8-87de-b30f7aa3c2d3",
|
|
"file--0570592b-859d-45c8-87de-b30f7aa3c2d3",
|
|
"observed-data--d22963f7-f0c2-40c9-9487-f1686dd6240f",
|
|
"file--d22963f7-f0c2-40c9-9487-f1686dd6240f",
|
|
"observed-data--e8df1240-c259-49b5-b427-9ab66cd22fec",
|
|
"file--e8df1240-c259-49b5-b427-9ab66cd22fec",
|
|
"observed-data--16d17630-0652-4f85-a8d8-daa9180fb9af",
|
|
"file--16d17630-0652-4f85-a8d8-daa9180fb9af",
|
|
"observed-data--eb62a731-93fe-4259-926e-d831d54626da",
|
|
"file--eb62a731-93fe-4259-926e-d831d54626da",
|
|
"observed-data--faaafeb9-3c87-486c-9052-08d647cbb12e",
|
|
"file--faaafeb9-3c87-486c-9052-08d647cbb12e",
|
|
"observed-data--dbb53c4a-400e-49a3-8502-2590ada99681",
|
|
"file--dbb53c4a-400e-49a3-8502-2590ada99681",
|
|
"observed-data--31904794-5094-4453-b505-baad4fff8798",
|
|
"file--31904794-5094-4453-b505-baad4fff8798",
|
|
"observed-data--b05989a0-5121-4f74-9593-c4c63743f5e7",
|
|
"file--b05989a0-5121-4f74-9593-c4c63743f5e7",
|
|
"observed-data--2ed64483-cd27-4662-9e13-2fda1de8e135",
|
|
"file--2ed64483-cd27-4662-9e13-2fda1de8e135",
|
|
"observed-data--c5715f1a-9102-44e1-ad9c-194d52537c28",
|
|
"file--c5715f1a-9102-44e1-ad9c-194d52537c28",
|
|
"observed-data--495a756c-bdd1-439e-8080-22fca4dd2702",
|
|
"file--495a756c-bdd1-439e-8080-22fca4dd2702",
|
|
"observed-data--13c2430c-f314-45a0-94a1-b7e94348eab0",
|
|
"file--13c2430c-f314-45a0-94a1-b7e94348eab0",
|
|
"observed-data--c2ad2225-185e-4eff-a4da-1f0d6b573393",
|
|
"file--c2ad2225-185e-4eff-a4da-1f0d6b573393",
|
|
"observed-data--4f83ee27-92c5-457d-b99e-99b33c858d5a",
|
|
"file--4f83ee27-92c5-457d-b99e-99b33c858d5a",
|
|
"observed-data--870244d6-6dd1-436b-8cda-3f7c17b8d3cb",
|
|
"file--870244d6-6dd1-436b-8cda-3f7c17b8d3cb",
|
|
"observed-data--47faeb13-fca3-46c2-a4e8-af14fe937fbb",
|
|
"file--47faeb13-fca3-46c2-a4e8-af14fe937fbb",
|
|
"observed-data--a13d5213-3ea3-4d2a-9459-ef9ddfc950c1",
|
|
"file--a13d5213-3ea3-4d2a-9459-ef9ddfc950c1",
|
|
"observed-data--d522b229-00e4-49e8-999f-ae1a8fd5eda8",
|
|
"file--d522b229-00e4-49e8-999f-ae1a8fd5eda8",
|
|
"observed-data--5e32758c-559e-4ec7-b38c-c1fcee31d0d6",
|
|
"file--5e32758c-559e-4ec7-b38c-c1fcee31d0d6",
|
|
"observed-data--1fc7ddd4-3857-4125-b94e-50d734c0a2d6",
|
|
"file--1fc7ddd4-3857-4125-b94e-50d734c0a2d6",
|
|
"observed-data--6a7cc301-3cd4-499a-b708-bf4283394c6b",
|
|
"file--6a7cc301-3cd4-499a-b708-bf4283394c6b",
|
|
"observed-data--eb7724fd-2987-467c-9ac8-f3550e48b3f4",
|
|
"file--eb7724fd-2987-467c-9ac8-f3550e48b3f4",
|
|
"observed-data--2ea679a4-795a-42f6-a3a4-73dd56faf438",
|
|
"file--2ea679a4-795a-42f6-a3a4-73dd56faf438",
|
|
"observed-data--e938e355-037a-4206-9e56-f845092404f0",
|
|
"file--e938e355-037a-4206-9e56-f845092404f0",
|
|
"observed-data--545466d7-b31a-4d23-add4-137bfc9c9658",
|
|
"file--545466d7-b31a-4d23-add4-137bfc9c9658",
|
|
"observed-data--7ef585a5-a71d-4645-a55f-50a845ac1acc",
|
|
"file--7ef585a5-a71d-4645-a55f-50a845ac1acc",
|
|
"observed-data--31fac661-7e6d-4c11-a3e2-58765e2032ff",
|
|
"file--31fac661-7e6d-4c11-a3e2-58765e2032ff",
|
|
"observed-data--f4db02d4-a228-4d67-9f0e-76d1bf33fee9",
|
|
"file--f4db02d4-a228-4d67-9f0e-76d1bf33fee9",
|
|
"observed-data--69204b13-2887-4dd3-b335-61e077a0bfd7",
|
|
"file--69204b13-2887-4dd3-b335-61e077a0bfd7",
|
|
"observed-data--5a10ff42-8703-4b13-9393-ad7f543fb71e",
|
|
"file--5a10ff42-8703-4b13-9393-ad7f543fb71e",
|
|
"observed-data--116fb4e3-0a63-4ddd-8f0b-cef195bde243",
|
|
"file--116fb4e3-0a63-4ddd-8f0b-cef195bde243",
|
|
"observed-data--8681a774-6a9a-4e49-8f1b-bde1f16fe283",
|
|
"file--8681a774-6a9a-4e49-8f1b-bde1f16fe283",
|
|
"observed-data--9b49832f-ed65-4f75-9bf6-9854b450980b",
|
|
"file--9b49832f-ed65-4f75-9bf6-9854b450980b",
|
|
"observed-data--efaa2ba8-ef43-44f6-aab1-411981473566",
|
|
"file--efaa2ba8-ef43-44f6-aab1-411981473566",
|
|
"observed-data--ca840037-a827-4bb3-bedd-74124505c61a",
|
|
"file--ca840037-a827-4bb3-bedd-74124505c61a",
|
|
"observed-data--61999fa9-c72b-49fb-89cf-e866ce16a71f",
|
|
"file--61999fa9-c72b-49fb-89cf-e866ce16a71f",
|
|
"observed-data--c883c588-bacb-4830-a612-30d0a2b8c0d0",
|
|
"file--c883c588-bacb-4830-a612-30d0a2b8c0d0",
|
|
"observed-data--537ed7c3-6970-4941-892d-e73bb3b16dba",
|
|
"file--537ed7c3-6970-4941-892d-e73bb3b16dba",
|
|
"observed-data--f6416255-b0a3-41a6-9ea9-cd53318ce1da",
|
|
"file--f6416255-b0a3-41a6-9ea9-cd53318ce1da",
|
|
"observed-data--f2ec5555-bd86-4859-ba84-7bd0185ce422",
|
|
"file--f2ec5555-bd86-4859-ba84-7bd0185ce422",
|
|
"observed-data--1551a658-75c4-43ff-8579-ac8f7c930670",
|
|
"file--1551a658-75c4-43ff-8579-ac8f7c930670",
|
|
"observed-data--63ed8fcf-c22f-4109-8625-b4d8cb868db0",
|
|
"file--63ed8fcf-c22f-4109-8625-b4d8cb868db0",
|
|
"x-misp-object--b5f33c2f-a945-4f0b-abac-7978e14a936c",
|
|
"x-misp-object--f3c71db5-5bae-4c49-b80c-117bf59b48c7",
|
|
"x-misp-object--bc480554-61ad-4e7f-944a-f0747675544d",
|
|
"x-misp-object--19a1a277-66a9-43b3-916a-b3eab35ad817",
|
|
"x-misp-object--c01928cb-f8eb-4b4d-a29c-6e4c268ff7ab",
|
|
"x-misp-object--e0403542-75ba-4f21-b811-68f28e75edae",
|
|
"x-misp-object--c89a5c0f-e2a4-42b9-a14d-a4e7b72c7ad2",
|
|
"x-misp-object--7db9ef3b-7153-4e0a-8567-a815d40a5153",
|
|
"indicator--c71e929e-2fa3-4879-bcf1-9bc32a4b8d31",
|
|
"x-misp-object--48f1c499-1a19-4a08-ade3-ecb57898a8df",
|
|
"indicator--8bba0110-45c5-4305-834f-c3aae9bb9724",
|
|
"x-misp-object--58a6ff89-26c1-40b1-8672-fcf6caa50e30",
|
|
"indicator--e3da7832-33dc-46e3-afbc-d6fbf3494347",
|
|
"x-misp-object--09842d3c-fe50-4168-b878-9997de0096a7",
|
|
"indicator--2a5d7fd2-1243-438a-8a1b-82e12134db55",
|
|
"x-misp-object--07f09fe9-afc3-4f94-ade6-c824d05401ed",
|
|
"indicator--7e57f7ee-ed83-4dae-a3c8-cc0a7fe92498",
|
|
"x-misp-object--99a1ec6f-6c13-4820-ace5-01729b9563d0",
|
|
"indicator--9e70cc8f-8b80-46d1-8cf0-46f9871783b5",
|
|
"x-misp-object--a27f8d1e-0a1e-45ce-8e83-fc2438f382a3",
|
|
"relationship--fb062d8c-d69e-4817-840b-6b213b900780",
|
|
"relationship--4ccf1bd5-453b-4b7e-959b-8bc3c5d2025b",
|
|
"relationship--56e1a1a3-9ec5-46db-8c5d-f45dd559f42d",
|
|
"relationship--ebd26a88-5452-40b3-b69b-40b1487eeea4",
|
|
"relationship--2884dede-eefe-4a33-b7a5-ab05220b094f",
|
|
"relationship--208b32b3-c030-4b2f-bd8f-bb254833dff1",
|
|
"relationship--5756a484-7638-4de0-9086-1cf257be16a6",
|
|
"relationship--3e20c380-99b6-4e86-90a4-70e9144e91a4",
|
|
"relationship--b1c4ab17-631f-4204-b496-62619b155e1d",
|
|
"relationship--a2ee07f0-175c-4879-b6f7-90509bb76c05",
|
|
"relationship--d15fd0df-7591-42ac-95b2-6ef1516e9410",
|
|
"relationship--64070d1f-f1dc-494b-81d5-5efe9db56d9a",
|
|
"relationship--20426b2b-8a54-49e3-9116-20b3a68f773c"
|
|
],
|
|
"labels": [
|
|
"Threat-Report",
|
|
"misp:tool=\"MISP-STIX-Converter\"",
|
|
"type:OSINT",
|
|
"osint:lifetime=\"perpetual\"",
|
|
"osint:certainty=\"50\""
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ca97573c-8689-4917-bb79-eb6054b7215b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:26:33.000Z",
|
|
"modified": "2021-03-31T15:26:33.000Z",
|
|
"description": "dracula4000.duckdns.org: enriched via the farsight_passivedns module.",
|
|
"pattern": "[domain-name:value = 'dracula4000.duckdns.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:26:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0cbb0fd4-414c-4ab3-8e27-3dca5cce43f3",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:26:33.000Z",
|
|
"modified": "2021-03-31T15:26:33.000Z",
|
|
"description": "draculax.myq-see.com: enriched via the farsight_passivedns module.",
|
|
"pattern": "[domain-name:value = 'draculax.myq-see.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:26:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3b33bd04-cf7c-4d80-a4e7-35a4af66104e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:26:33.000Z",
|
|
"modified": "2021-03-31T15:26:33.000Z",
|
|
"pattern": "[domain-name:value = 'macroso.ddns.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:26:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--749e7db4-9a56-41d7-8857-0a0c2a3b4e78",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:26:33.000Z",
|
|
"modified": "2021-03-31T15:26:33.000Z",
|
|
"description": "win08.zapto.org: enriched via the farsight_passivedns module.",
|
|
"pattern": "[domain-name:value = 'win08.zapto.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:26:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--199ccf42-4249-4a55-8f44-c8fd6323de9d",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:26:33.000Z",
|
|
"modified": "2021-03-31T15:26:33.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.163.152.127']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:26:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1e71a3ad-eee3-4156-a671-b7ddceaf32b9",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:26:33.000Z",
|
|
"modified": "2021-03-31T15:26:33.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '51.79.47.48']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:26:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--35e3ce4b-a445-42ed-a1cd-29a92fefda85",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:26:33.000Z",
|
|
"modified": "2021-03-31T15:26:33.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '51.161.76.196']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:26:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--67d8108b-f221-4013-a86b-81f8b6722c62",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:26:33.000Z",
|
|
"modified": "2021-03-31T15:26:33.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '141.255.147.114']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:26:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--45c93512-acc3-435b-8bde-7715dbdb409f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:26:33.000Z",
|
|
"modified": "2021-03-31T15:26:33.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '177.18.137.16']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:26:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--129e2ac4-95d3-4508-88c2-55638b5a68f9",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:26:33.000Z",
|
|
"modified": "2021-03-31T15:26:33.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.253.227.97']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:26:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0d3aaab8-6673-43b2-8836-2c01eab0b249",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:26:33.000Z",
|
|
"modified": "2021-03-31T15:26:33.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.185.197.247']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:26:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--939aed74-a640-44a4-b724-b8446235df51",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:27:46.000Z",
|
|
"modified": "2021-03-31T15:27:46.000Z",
|
|
"description": "DROPPED VERIFIED SAMPLE",
|
|
"pattern": "[file:hashes.SHA256 = '0bfb087059a4c04cc55d8b691f3c6297e22f6e94b0354265a06382d9e725ee16']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:27:46Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1806d46a-b839-4f96-9464-dae6be80f949",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:27:46.000Z",
|
|
"modified": "2021-03-31T15:27:46.000Z",
|
|
"description": "DROPPED VERIFIED SAMPLE",
|
|
"pattern": "[file:hashes.SHA256 = '2e50dcebf10fedf43a108fab866b930d2c53318e163098182c511418293a7997']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:27:46Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b001d449-c2b9-4ce1-a238-f332ae0c5d87",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:27:46.000Z",
|
|
"modified": "2021-03-31T15:27:46.000Z",
|
|
"description": "DROPPED VERIFIED SAMPLE",
|
|
"pattern": "[file:hashes.SHA256 = 'a334b1b057a8c5a6c10a186e59324b2ea856fc0b8d5ac987953633a9641e660b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:27:46Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5629e036-3c07-4b1e-abc9-c6dac4d46e18",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:27:46.000Z",
|
|
"modified": "2021-03-31T15:27:46.000Z",
|
|
"description": "DROPPED VERIFIED SAMPLE",
|
|
"pattern": "[file:hashes.SHA256 = 'afe683c3c02ac87b88e2980dff9440f2db8889f981ae09109dfab3ef2efa9d6e']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:27:46Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b41ccbf5-3bf7-4a37-ba41-540dd282a78c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:27:46.000Z",
|
|
"modified": "2021-03-31T15:27:46.000Z",
|
|
"description": "DROPPED VERIFIED SAMPLE",
|
|
"pattern": "[file:hashes.SHA256 = 'b91090cd27f4e34ac102ce77f40fb1d2fa38d75e492461b0f074158ac783464f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:27:46Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c2092d30-d082-4e4f-b37e-52d7f2eeeb9e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:27:46.000Z",
|
|
"modified": "2021-03-31T15:27:46.000Z",
|
|
"description": "DROPPED VERIFIED SAMPLE",
|
|
"pattern": "[file:hashes.SHA256 = 'e2b6de1933bbfbbab5e7b6c05e4529d4cef7473574281ac161a49e87d149b135']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:27:46Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0a4537de-a41d-4224-b6b0-9e7bee0a3f37",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:27:46.000Z",
|
|
"modified": "2021-03-31T15:27:46.000Z",
|
|
"description": "DROPPED VERIFIED SAMPLE",
|
|
"pattern": "[file:hashes.SHA256 = '2725f56e664c751c536c421196de874f8c66a4347948596112273675a827a0b2']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:27:46Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--f82ae3fe-7b2f-45e9-bf18-2c55b33f74e3",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:36.000Z",
|
|
"modified": "2021-03-31T15:31:36.000Z",
|
|
"first_observed": "2021-03-31T15:31:36Z",
|
|
"last_observed": "2021-03-31T15:31:36Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--f82ae3fe-7b2f-45e9-bf18-2c55b33f74e3"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--f82ae3fe-7b2f-45e9-bf18-2c55b33f74e3",
|
|
"hashes": {
|
|
"SHA-256": "d62d3ab00318dba0d89190319e791a378f49fa3aa7631c373912fa07bdebae98"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--fcc7f193-dadc-4a13-9536-42905b509d7e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:36.000Z",
|
|
"modified": "2021-03-31T15:31:36.000Z",
|
|
"first_observed": "2021-03-31T15:31:36Z",
|
|
"last_observed": "2021-03-31T15:31:36Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--fcc7f193-dadc-4a13-9536-42905b509d7e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--fcc7f193-dadc-4a13-9536-42905b509d7e",
|
|
"hashes": {
|
|
"SHA-256": "a22e1a81c5a91140d081159b6e42428948fc4b2f137421bb03dad3d99628a07e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--dabef9c1-7266-4f19-a558-0295ed9329c8",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:36.000Z",
|
|
"modified": "2021-03-31T15:31:36.000Z",
|
|
"first_observed": "2021-03-31T15:31:36Z",
|
|
"last_observed": "2021-03-31T15:31:36Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--dabef9c1-7266-4f19-a558-0295ed9329c8"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--dabef9c1-7266-4f19-a558-0295ed9329c8",
|
|
"hashes": {
|
|
"SHA-256": "3285df32cd00eea928830325e491abf9b43818dc8756685d11cf2211d3dfb9e2"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--d864b27c-98de-49b6-9285-18e4fb8e07fd",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:36.000Z",
|
|
"modified": "2021-03-31T15:31:36.000Z",
|
|
"first_observed": "2021-03-31T15:31:36Z",
|
|
"last_observed": "2021-03-31T15:31:36Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--d864b27c-98de-49b6-9285-18e4fb8e07fd"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--d864b27c-98de-49b6-9285-18e4fb8e07fd",
|
|
"hashes": {
|
|
"SHA-256": "c18242d6bef30342aef2c6f1ba7b23e20c1641b6635d80c7ec9d7ba23bd6f3d1"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a9b59980-6dfd-476f-9edd-aad00df90979",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:36.000Z",
|
|
"modified": "2021-03-31T15:31:36.000Z",
|
|
"first_observed": "2021-03-31T15:31:36Z",
|
|
"last_observed": "2021-03-31T15:31:36Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a9b59980-6dfd-476f-9edd-aad00df90979"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a9b59980-6dfd-476f-9edd-aad00df90979",
|
|
"hashes": {
|
|
"SHA-256": "182ef43e333b2506363a3f694104eed06487ee90b4c315d65bfd5accd7daaaeb"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--2fc973c4-a2ad-4698-b326-bc3090eda122",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:36.000Z",
|
|
"modified": "2021-03-31T15:31:36.000Z",
|
|
"first_observed": "2021-03-31T15:31:36Z",
|
|
"last_observed": "2021-03-31T15:31:36Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--2fc973c4-a2ad-4698-b326-bc3090eda122"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--2fc973c4-a2ad-4698-b326-bc3090eda122",
|
|
"hashes": {
|
|
"SHA-256": "c56f601adfb9da9c81abbb8c033ac9caf07283b9986b6533b86970802e5a9666"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1970d419-160a-4563-85b3-02f85be9c7ca",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:36.000Z",
|
|
"modified": "2021-03-31T15:31:36.000Z",
|
|
"first_observed": "2021-03-31T15:31:36Z",
|
|
"last_observed": "2021-03-31T15:31:36Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1970d419-160a-4563-85b3-02f85be9c7ca"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1970d419-160a-4563-85b3-02f85be9c7ca",
|
|
"hashes": {
|
|
"SHA-256": "7d2f9dcbdb1b2c89781535dd96adb367af99550584540d5f352a1c934d2c5de8"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--2b55ce3f-ad18-4e1e-82a9-a34e0a490132",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--2b55ce3f-ad18-4e1e-82a9-a34e0a490132"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--2b55ce3f-ad18-4e1e-82a9-a34e0a490132",
|
|
"hashes": {
|
|
"SHA-256": "e406757e8f67107386c83972d27918a66d03828f67624513e4030642d0bf0d7e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a0b08f7e-25d0-4e0b-8e7f-5b8180011f49",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a0b08f7e-25d0-4e0b-8e7f-5b8180011f49"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a0b08f7e-25d0-4e0b-8e7f-5b8180011f49",
|
|
"hashes": {
|
|
"SHA-256": "5e3f27128bad548c90e140cedbf153afdcac45a302112545fa3a56aaea714e11"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e55eda8f-796f-4be6-82ab-f6306992f277",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e55eda8f-796f-4be6-82ab-f6306992f277"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e55eda8f-796f-4be6-82ab-f6306992f277",
|
|
"hashes": {
|
|
"SHA-256": "4533e1cd680b6be739fa6c12cbfc1b0bb96994a4f6355f26f26745adb9a7b4ce"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--6dc71ac6-3642-4dcc-a111-8472dceb14f7",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--6dc71ac6-3642-4dcc-a111-8472dceb14f7"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--6dc71ac6-3642-4dcc-a111-8472dceb14f7",
|
|
"hashes": {
|
|
"SHA-256": "405d5122eb0355732fa99f715437f7493937a763b86bd7346c916210a6a6c71a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--9cda5a26-478e-4fc8-9bbb-97afc80935fe",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--9cda5a26-478e-4fc8-9bbb-97afc80935fe"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--9cda5a26-478e-4fc8-9bbb-97afc80935fe",
|
|
"hashes": {
|
|
"SHA-256": "6853f50efedb1a724e3cc85f0747ee64bd1c05bdfdb1fdbab482afc2b7be5df2"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--96b27a5a-a140-427b-bf16-e4abfa0f059d",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--96b27a5a-a140-427b-bf16-e4abfa0f059d"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--96b27a5a-a140-427b-bf16-e4abfa0f059d",
|
|
"hashes": {
|
|
"SHA-256": "55038208bd28244d323e8cb268e66c47f797de4fae784ac849081edf2c8c1ce5"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--eccdb2fb-5ea4-4ff3-b1a4-0aa9b2a516b0",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--eccdb2fb-5ea4-4ff3-b1a4-0aa9b2a516b0"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--eccdb2fb-5ea4-4ff3-b1a4-0aa9b2a516b0",
|
|
"hashes": {
|
|
"SHA-256": "e777c479fa37bbed039bf956a337b7378bc9aa0d71e0a27dccf710ddd8939a50"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--8f6913ee-ed1d-412b-9983-3d88e2eee9a7",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--8f6913ee-ed1d-412b-9983-3d88e2eee9a7"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--8f6913ee-ed1d-412b-9983-3d88e2eee9a7",
|
|
"hashes": {
|
|
"SHA-256": "3d668c80d1299a53e2d9b552ad1e42fcb975adf1ab6496a7fab161255ec1d7a0"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a1f54483-c294-4616-b38a-df3b5b1410d8",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a1f54483-c294-4616-b38a-df3b5b1410d8"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a1f54483-c294-4616-b38a-df3b5b1410d8",
|
|
"hashes": {
|
|
"SHA-256": "cd71599e8a745baff11b0c8c2e2b3f82f7ec65fb737c781a8d37c8a395576bb9"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--6eed024f-7412-4f70-a7a6-d62e8051b358",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--6eed024f-7412-4f70-a7a6-d62e8051b358"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--6eed024f-7412-4f70-a7a6-d62e8051b358",
|
|
"hashes": {
|
|
"SHA-256": "d2fb87bf72b583d59dd52e876fe6b08dafa2e5731d6d5d8df92128c6cb19805a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--041c0c01-d358-4c56-b259-276f286aa778",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--041c0c01-d358-4c56-b259-276f286aa778"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--041c0c01-d358-4c56-b259-276f286aa778",
|
|
"hashes": {
|
|
"SHA-256": "3f45f3694979dafc7daaba955b7e1a90a35a4fccb1e112dcd5326866165ae62e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--fbbdeddf-b6dd-4760-aebc-a58da9fe92f2",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--fbbdeddf-b6dd-4760-aebc-a58da9fe92f2"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--fbbdeddf-b6dd-4760-aebc-a58da9fe92f2",
|
|
"hashes": {
|
|
"SHA-256": "d9f7c053c812e3700bce729a42023988ba612cc4cfc0ce833631b2e85db776ec"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--417f6e98-97a3-4bba-86df-05dbbdceff6f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--417f6e98-97a3-4bba-86df-05dbbdceff6f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--417f6e98-97a3-4bba-86df-05dbbdceff6f",
|
|
"hashes": {
|
|
"SHA-256": "e6c45e705a8b59889e71e47b0538dd676fe064d50969078e23740cfa7a2623d0"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--9ca3f4f2-f2de-4f7a-b48e-41f38e99c649",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--9ca3f4f2-f2de-4f7a-b48e-41f38e99c649"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--9ca3f4f2-f2de-4f7a-b48e-41f38e99c649",
|
|
"hashes": {
|
|
"SHA-256": "b732fc7936bbbb056ffae0f7a3c4e814a02382e4e2c4387aa54ca2381c77a7b4"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--b6c92817-6dc1-435e-876c-58db289e3133",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--b6c92817-6dc1-435e-876c-58db289e3133"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--b6c92817-6dc1-435e-876c-58db289e3133",
|
|
"hashes": {
|
|
"SHA-256": "5190e4975e0c2ab4e48b961281baac398b7e57efacd65fa13077219ab6a406f1"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--0a35ccbf-eada-4912-87ef-56d60fa36491",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--0a35ccbf-eada-4912-87ef-56d60fa36491"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--0a35ccbf-eada-4912-87ef-56d60fa36491",
|
|
"hashes": {
|
|
"SHA-256": "40be82b16ed852cc5cc625476d00247458c1f8eb603b30d127cd8da8039b4ad8"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--aa67f0b7-1f43-455a-b50d-ae864f58311f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--aa67f0b7-1f43-455a-b50d-ae864f58311f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--aa67f0b7-1f43-455a-b50d-ae864f58311f",
|
|
"hashes": {
|
|
"SHA-256": "870005ba243b2a7c5879164e3fa598301703086ee06e5f098aea1846bf174cb4"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e3bcaede-d937-4a5c-b243-fd837f68f6f1",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e3bcaede-d937-4a5c-b243-fd837f68f6f1"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e3bcaede-d937-4a5c-b243-fd837f68f6f1",
|
|
"hashes": {
|
|
"SHA-256": "ff826fa39b79daa0670b1d238d8285c1ae65bdca271f4586a129d72248333e5b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--7d770020-325d-4613-b472-8785ff6630cf",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--7d770020-325d-4613-b472-8785ff6630cf"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--7d770020-325d-4613-b472-8785ff6630cf",
|
|
"hashes": {
|
|
"SHA-256": "368024811c9d4166a3b4fb11c5120ca193caae0db6d97fd5219be4357abb8d03"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a29e6aef-b09b-4034-ba48-4f68951ad2c5",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a29e6aef-b09b-4034-ba48-4f68951ad2c5"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a29e6aef-b09b-4034-ba48-4f68951ad2c5",
|
|
"hashes": {
|
|
"SHA-256": "51e8faad145a6c0566d5303af92ea6b3b68e0c5aefb32142baafbee26af8f933"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1aae7470-52c1-47fe-850d-96c53754ff63",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1aae7470-52c1-47fe-850d-96c53754ff63"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1aae7470-52c1-47fe-850d-96c53754ff63",
|
|
"hashes": {
|
|
"SHA-256": "ae159d102f3cb65d509a86e3e20958b66324af3ad802f84be0200c930bf4d039"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--262f912f-1fe0-44c4-aa8c-4d0f245ae54b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--262f912f-1fe0-44c4-aa8c-4d0f245ae54b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--262f912f-1fe0-44c4-aa8c-4d0f245ae54b",
|
|
"hashes": {
|
|
"SHA-256": "30d6c8def02dd3045a81012ee64d27b237ab089f5fd6a2fc93d2af799e69930e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--6b03c91b-0c9f-44c3-9d9c-cc6cf7b583de",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--6b03c91b-0c9f-44c3-9d9c-cc6cf7b583de"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--6b03c91b-0c9f-44c3-9d9c-cc6cf7b583de",
|
|
"hashes": {
|
|
"SHA-256": "bdc3860e31dc11d1a2019e87626874c1cb168c96db68bd6647deb91b72f3ce2a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--93f3ae7a-2d4a-4f28-a1e2-e788b61153db",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--93f3ae7a-2d4a-4f28-a1e2-e788b61153db"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--93f3ae7a-2d4a-4f28-a1e2-e788b61153db",
|
|
"hashes": {
|
|
"SHA-256": "04a581ffda63bee68daa8d8a2885e4105978f8ccb98e947b6bb7b56183d3599b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--c37437ad-e3c8-4521-8c24-560d37d0b619",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--c37437ad-e3c8-4521-8c24-560d37d0b619"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--c37437ad-e3c8-4521-8c24-560d37d0b619",
|
|
"hashes": {
|
|
"SHA-256": "03e9d27e7fb2a5e8cbf6f325a30dbdaa68d211afb8ba94e368d26bf1afeab7ad"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--c753e6a6-703b-4c8d-a1e9-7680981f8f46",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--c753e6a6-703b-4c8d-a1e9-7680981f8f46"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--c753e6a6-703b-4c8d-a1e9-7680981f8f46",
|
|
"hashes": {
|
|
"SHA-256": "9ba4fb3f201e4946f93e5614383d29e34fddfba37b9468df6b655ff474008e43"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--f8b064bd-03d6-48ad-abc3-8ccfe734cb26",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--f8b064bd-03d6-48ad-abc3-8ccfe734cb26"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--f8b064bd-03d6-48ad-abc3-8ccfe734cb26",
|
|
"hashes": {
|
|
"SHA-256": "8f3e8fb9c3846d32438855cbea190ef85f0972cf77b6f2cb268381b8d9216fc3"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--320f9362-ecb6-49c5-9d3d-4a7814d3af44",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--320f9362-ecb6-49c5-9d3d-4a7814d3af44"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--320f9362-ecb6-49c5-9d3d-4a7814d3af44",
|
|
"hashes": {
|
|
"SHA-256": "85e803adc61e5558bffee93978288071762b9ad0307ff48e6c89138ab273f130"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--0dc06091-5d92-433a-8dbc-ec1fd048bf3f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--0dc06091-5d92-433a-8dbc-ec1fd048bf3f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--0dc06091-5d92-433a-8dbc-ec1fd048bf3f",
|
|
"hashes": {
|
|
"SHA-256": "36373fbd144c8087db31beb0c8d1d6e7d66b356e9bc95c19320ac2460fbc9dd8"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--7ff5c094-aca5-4774-8558-f0186d50dafd",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--7ff5c094-aca5-4774-8558-f0186d50dafd"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--7ff5c094-aca5-4774-8558-f0186d50dafd",
|
|
"hashes": {
|
|
"SHA-256": "1757bd69732d76d8eefa89e7d4d395b08f244dca43196d244d53ccff61708e53"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--9662a0b0-387c-4147-9b60-5d42093278b7",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--9662a0b0-387c-4147-9b60-5d42093278b7"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--9662a0b0-387c-4147-9b60-5d42093278b7",
|
|
"hashes": {
|
|
"SHA-256": "c01035e288856030253cc09d7d73eaae8683f4de0e5dd5d2881c793227d77d73"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a2662416-5f7f-46f4-9de4-adb8c337660c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a2662416-5f7f-46f4-9de4-adb8c337660c"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a2662416-5f7f-46f4-9de4-adb8c337660c",
|
|
"hashes": {
|
|
"SHA-256": "b06ac83c0d5aec138505e04300a4324e79aead11866999b2f9c52167295d3f3b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--2d323d54-41eb-4a5d-8e34-6c8577201278",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--2d323d54-41eb-4a5d-8e34-6c8577201278"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--2d323d54-41eb-4a5d-8e34-6c8577201278",
|
|
"hashes": {
|
|
"SHA-256": "85c3634301dea0990d9c4812fe28f0c97122441ed37e3211575ac7b90f039e3e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--43fc816a-08fe-4f87-8a9a-85a26459b893",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--43fc816a-08fe-4f87-8a9a-85a26459b893"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--43fc816a-08fe-4f87-8a9a-85a26459b893",
|
|
"hashes": {
|
|
"SHA-256": "e4945f7f35d25712087157a1d77a9ace8f4b037b4fec2024a8f85de9b987a798"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--cfa66628-1cdb-44ac-a8a2-48871057869c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--cfa66628-1cdb-44ac-a8a2-48871057869c"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--cfa66628-1cdb-44ac-a8a2-48871057869c",
|
|
"hashes": {
|
|
"SHA-256": "8e01a3b2a1774d5a73fdfd9b325c1724407421c5ee3903520eadf7747f44a8e8"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--5544dc00-9e7c-4cdd-bb8d-0e44b58790e5",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--5544dc00-9e7c-4cdd-bb8d-0e44b58790e5"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--5544dc00-9e7c-4cdd-bb8d-0e44b58790e5",
|
|
"hashes": {
|
|
"SHA-256": "7585548ecd44e3904ab15f673fc850099770d0581910c9bf114887d75f917a68"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--2d560534-a75b-4c6d-8bda-754e3a852bed",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--2d560534-a75b-4c6d-8bda-754e3a852bed"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--2d560534-a75b-4c6d-8bda-754e3a852bed",
|
|
"hashes": {
|
|
"SHA-256": "973e09623939a06b8e364471057970521dc17e33c13105cb181a858ce30bd124"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--bd4b3e13-8cf6-47ec-9ee5-05cf7495d34e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--bd4b3e13-8cf6-47ec-9ee5-05cf7495d34e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--bd4b3e13-8cf6-47ec-9ee5-05cf7495d34e",
|
|
"hashes": {
|
|
"SHA-256": "53d6452c2baaf7273c1fd4a5142f57092dc7a76dc8a0769698e5738a019c34cc"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--914fe087-96f0-44e8-948e-9f8ba343959c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--914fe087-96f0-44e8-948e-9f8ba343959c"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--914fe087-96f0-44e8-948e-9f8ba343959c",
|
|
"hashes": {
|
|
"SHA-256": "435cce0c101a54e950a7273cefd2e4a11697f732d2677fad8dcce290d97758a7"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--eb76e892-a96f-4c5a-8428-3409733f7c78",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--eb76e892-a96f-4c5a-8428-3409733f7c78"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--eb76e892-a96f-4c5a-8428-3409733f7c78",
|
|
"hashes": {
|
|
"SHA-256": "b675b2a7eb7892e0e1c76657f0b0f3f4f372f234804eb83027fa692dacf2ce61"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a5e718a0-bafb-4401-8edc-9a3251c27864",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a5e718a0-bafb-4401-8edc-9a3251c27864"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a5e718a0-bafb-4401-8edc-9a3251c27864",
|
|
"hashes": {
|
|
"SHA-256": "8e38d8d3510d65bffb8e1ee0a377aa3e19442216ab5aff4b9a2163bdd87bd636"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--ccb6934c-d265-4622-92ab-787fca873218",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--ccb6934c-d265-4622-92ab-787fca873218"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--ccb6934c-d265-4622-92ab-787fca873218",
|
|
"hashes": {
|
|
"SHA-256": "3b3d70dbaea977bef7ec854985bee8163c0a7d2cadd5a0d0c552fa79caee2d88"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--95b37787-27a5-4faa-a12a-b454c748d091",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--95b37787-27a5-4faa-a12a-b454c748d091"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--95b37787-27a5-4faa-a12a-b454c748d091",
|
|
"hashes": {
|
|
"SHA-256": "1d4aa1324012eb2eb09a62ea4f936e1cdef4f59ff0042044c54da8378e918d50"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--31a188bf-be00-49f3-a1f8-42a810f86fc9",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--31a188bf-be00-49f3-a1f8-42a810f86fc9"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--31a188bf-be00-49f3-a1f8-42a810f86fc9",
|
|
"hashes": {
|
|
"SHA-256": "94c86a5b98930d99a5182ced7fe21402f33811c4a541ea8ad1ec7824723f7504"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--27c3322b-6044-4fc8-9514-9a5c8e397058",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--27c3322b-6044-4fc8-9514-9a5c8e397058"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--27c3322b-6044-4fc8-9514-9a5c8e397058",
|
|
"hashes": {
|
|
"SHA-256": "4d48781dae78c93a2ec71a0938f6b295b7a160030d34c2b5f1c88a899b4f911f"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--4975837a-ddb6-40b3-9107-1b60798e8c12",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--4975837a-ddb6-40b3-9107-1b60798e8c12"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--4975837a-ddb6-40b3-9107-1b60798e8c12",
|
|
"hashes": {
|
|
"SHA-256": "45fe1c6d4c46132803eb9f2c4784758ba805dc9f49c963fdbe6799debd7d992f"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--80859c2a-8d87-401c-811c-57f84ad51f8d",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--80859c2a-8d87-401c-811c-57f84ad51f8d"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--80859c2a-8d87-401c-811c-57f84ad51f8d",
|
|
"hashes": {
|
|
"SHA-256": "29dc7a80610a5875c5a8484f3793263aa00218963130afea6399a6219a4038f7"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a8fe17b3-4f10-454e-bee6-487504042b63",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a8fe17b3-4f10-454e-bee6-487504042b63"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a8fe17b3-4f10-454e-bee6-487504042b63",
|
|
"hashes": {
|
|
"SHA-256": "907fd2665b414bf2a91bb09656927b2cb9642e3c017b1fbd88947d2be4b99440"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--4df978d7-caa2-4d27-8615-4e521d010f33",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--4df978d7-caa2-4d27-8615-4e521d010f33"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--4df978d7-caa2-4d27-8615-4e521d010f33",
|
|
"hashes": {
|
|
"SHA-256": "1eed2c95b7ec43ac92876fe4e0745edcb32d7f19c2ebc9560571059c09860ce1"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e7c68daf-a9ab-44e8-a2ae-556fcd1a553c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e7c68daf-a9ab-44e8-a2ae-556fcd1a553c"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e7c68daf-a9ab-44e8-a2ae-556fcd1a553c",
|
|
"hashes": {
|
|
"SHA-256": "211133604ef9598961070899a6031eb51dd9757ae7d07e9f52eefe809a763abe"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--0ac976bd-8695-4297-9f1a-1de390033bdd",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--0ac976bd-8695-4297-9f1a-1de390033bdd"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--0ac976bd-8695-4297-9f1a-1de390033bdd",
|
|
"hashes": {
|
|
"SHA-256": "db1a430eeb563994801635a7742ad7b2f838f8dca77cb183186a679274ca016e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--07b351b9-26cc-4b1b-9268-eacaae4ae66e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--07b351b9-26cc-4b1b-9268-eacaae4ae66e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--07b351b9-26cc-4b1b-9268-eacaae4ae66e",
|
|
"hashes": {
|
|
"SHA-256": "5848752771c64c7810bc3eba5e0a17846d63aca4f9e16cb701b99e86f1a6930e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--2babc83d-c550-4c18-a900-6c69c77abb6a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--2babc83d-c550-4c18-a900-6c69c77abb6a"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--2babc83d-c550-4c18-a900-6c69c77abb6a",
|
|
"hashes": {
|
|
"SHA-256": "a4118b539ab904b261ae801d25b554381b4289898a27309b9200e25ee147ac71"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1151b6d6-db68-494a-aa38-84872e5dc949",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1151b6d6-db68-494a-aa38-84872e5dc949"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1151b6d6-db68-494a-aa38-84872e5dc949",
|
|
"hashes": {
|
|
"SHA-256": "cf4122db5ccd44c847e4091855efa2b6a3cd13a22d97ac0ef66f833a793ae70b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--3e47f9c9-75ec-4316-9d67-8cf8af5f8a9e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--3e47f9c9-75ec-4316-9d67-8cf8af5f8a9e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--3e47f9c9-75ec-4316-9d67-8cf8af5f8a9e",
|
|
"hashes": {
|
|
"SHA-256": "ce8970bb5cae008cabc3a113137df9908d7b7d38dc3524996746aec42e9c9339"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--f05597e9-4b09-47b3-bad2-26502b8e5d2b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--f05597e9-4b09-47b3-bad2-26502b8e5d2b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--f05597e9-4b09-47b3-bad2-26502b8e5d2b",
|
|
"hashes": {
|
|
"SHA-256": "fece007679ed50af571e93013890417f14b853ca816c58b3a15e480a5eb350c2"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--9e4213ca-4a2b-4e25-9765-ae1a614a692e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--9e4213ca-4a2b-4e25-9765-ae1a614a692e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--9e4213ca-4a2b-4e25-9765-ae1a614a692e",
|
|
"hashes": {
|
|
"SHA-256": "0d7e9522ce1de3b494aad3b8e098a4f7bf87af2834cb99be8ed90df717a1de67"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--8463e948-8070-4b7a-b2d6-214fdd29194f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--8463e948-8070-4b7a-b2d6-214fdd29194f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--8463e948-8070-4b7a-b2d6-214fdd29194f",
|
|
"hashes": {
|
|
"SHA-256": "9a73c8437321cb5718d33e84ebf8a92530975bd3829a833c2240e24678577680"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--37b08f06-a79a-4a2b-a20c-34dcfaf74f64",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--37b08f06-a79a-4a2b-a20c-34dcfaf74f64"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--37b08f06-a79a-4a2b-a20c-34dcfaf74f64",
|
|
"hashes": {
|
|
"SHA-256": "d86f28b3a6a49b2e6b7e7597a5b441cf6af7429f6f1fd74568ba0890d4cca0d2"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--f3944187-f5eb-441b-8895-9307f921ab3f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--f3944187-f5eb-441b-8895-9307f921ab3f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--f3944187-f5eb-441b-8895-9307f921ab3f",
|
|
"hashes": {
|
|
"SHA-256": "93c384857bbecd9676fba62f07ac1694dd8b3bf4586081ef2047dfaef36beb29"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--7ed6ed10-ec2b-449f-a6c8-4d38705bbdbd",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--7ed6ed10-ec2b-449f-a6c8-4d38705bbdbd"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--7ed6ed10-ec2b-449f-a6c8-4d38705bbdbd",
|
|
"hashes": {
|
|
"SHA-256": "07f6b8525d29fcac499efa840633c8e5a440455bb6af9bb27cf657e959bbb915"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1dbb4b08-e15e-453c-bea6-702fba435d92",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1dbb4b08-e15e-453c-bea6-702fba435d92"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1dbb4b08-e15e-453c-bea6-702fba435d92",
|
|
"hashes": {
|
|
"SHA-256": "2d26b3b4791273321cedc110e4933c1bbc3a3c6a28e02fe38244e1b286fd51a7"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--be644923-a2a6-41bb-b5fb-b66e46e30b64",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--be644923-a2a6-41bb-b5fb-b66e46e30b64"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--be644923-a2a6-41bb-b5fb-b66e46e30b64",
|
|
"hashes": {
|
|
"SHA-256": "06b3bb77245ce7f3c71b7fda49e0ed3d3a76501f9e27f8d211c17289e99b8f60"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--134d06ef-89dc-4267-a40a-549a6d31825e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--134d06ef-89dc-4267-a40a-549a6d31825e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--134d06ef-89dc-4267-a40a-549a6d31825e",
|
|
"hashes": {
|
|
"SHA-256": "0b138b61579a11994d2b8f2ce18d176a703b3dcbef2d617e2f6d5e7325f49d29"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--cc6bd258-7f43-49cb-809d-219ead4c3722",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--cc6bd258-7f43-49cb-809d-219ead4c3722"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--cc6bd258-7f43-49cb-809d-219ead4c3722",
|
|
"hashes": {
|
|
"SHA-256": "8f9515284eea5d7d997d54545a8860d978f9d9d2aa2e4369e2953c6ea4a487f8"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--badb48c7-37a4-453f-9be9-b5e3beef4506",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--badb48c7-37a4-453f-9be9-b5e3beef4506"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--badb48c7-37a4-453f-9be9-b5e3beef4506",
|
|
"hashes": {
|
|
"SHA-256": "a70c5726331e54b0329b0aff069d0a80e87861469ed5450f4815e5dfb6090410"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1416cc2f-411a-49c5-87e3-dc224a116a99",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1416cc2f-411a-49c5-87e3-dc224a116a99"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1416cc2f-411a-49c5-87e3-dc224a116a99",
|
|
"hashes": {
|
|
"SHA-256": "23fb98ce0b45d5bfcb55ac71ddf2b3cfec4c1f42faeca37308e95d601d899dcf"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--45652632-90cb-4e1a-add9-d669ddd74f52",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--45652632-90cb-4e1a-add9-d669ddd74f52"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--45652632-90cb-4e1a-add9-d669ddd74f52",
|
|
"hashes": {
|
|
"SHA-256": "d90422586d685e521c791f7260ecbe59892a32aecc9ebed251d961ce83aca160"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--24ed51c4-e299-42cc-9c84-68c31b179584",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--24ed51c4-e299-42cc-9c84-68c31b179584"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--24ed51c4-e299-42cc-9c84-68c31b179584",
|
|
"hashes": {
|
|
"SHA-256": "bc16c4f44d4412369eaa8a293d7221c7619568553dcb330651a5ac8bb4d7442a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--c8e708b6-2c2e-43f9-bef9-13b5103908d1",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--c8e708b6-2c2e-43f9-bef9-13b5103908d1"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--c8e708b6-2c2e-43f9-bef9-13b5103908d1",
|
|
"hashes": {
|
|
"SHA-256": "bcfc04bb8fc2895011812b3ae5b25617083a1e9f49222e028d536302490688ef"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e6cd68a3-f4d6-442b-9b9e-c3b2f40a58f1",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e6cd68a3-f4d6-442b-9b9e-c3b2f40a58f1"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e6cd68a3-f4d6-442b-9b9e-c3b2f40a58f1",
|
|
"hashes": {
|
|
"SHA-256": "954728991b45f82ce6229e7d79034d09b5fc38e3bef189af70f3b940ac2cdacf"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--017f9d32-03b6-4cb3-9066-7c29efc3bc8c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--017f9d32-03b6-4cb3-9066-7c29efc3bc8c"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--017f9d32-03b6-4cb3-9066-7c29efc3bc8c",
|
|
"hashes": {
|
|
"SHA-256": "5119e4d55c7de56230f2c71ad14936ee126d6aa99e9c339f84276270bb42e502"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--00ceabf5-8361-4c0c-bee3-d56b7b2b800c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--00ceabf5-8361-4c0c-bee3-d56b7b2b800c"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--00ceabf5-8361-4c0c-bee3-d56b7b2b800c",
|
|
"hashes": {
|
|
"SHA-256": "16074317440e8e6841d073fd3cc5ba7e7992cfba62c27ada5b678d08a6ce2534"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--347ef89f-cecb-4f7e-a5e2-1c91cc23e74d",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--347ef89f-cecb-4f7e-a5e2-1c91cc23e74d"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--347ef89f-cecb-4f7e-a5e2-1c91cc23e74d",
|
|
"hashes": {
|
|
"SHA-256": "3c2ccf70e10e271e4cc67bb960d14a1bf9ff89d606170aa4cfc09ae3a5cd47c4"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--5702b64d-d4a0-4f85-aee3-ce85a48f2490",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--5702b64d-d4a0-4f85-aee3-ce85a48f2490"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--5702b64d-d4a0-4f85-aee3-ce85a48f2490",
|
|
"hashes": {
|
|
"SHA-256": "fc2c4af817496c90fc1a31b89b9d3eaa036d59c3e47a0b79c249027df6e8d208"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--8963b433-0fbb-4730-bade-f457b4572c58",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:37.000Z",
|
|
"modified": "2021-03-31T15:31:37.000Z",
|
|
"first_observed": "2021-03-31T15:31:37Z",
|
|
"last_observed": "2021-03-31T15:31:37Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--8963b433-0fbb-4730-bade-f457b4572c58"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--8963b433-0fbb-4730-bade-f457b4572c58",
|
|
"hashes": {
|
|
"SHA-256": "cfed8cd9c03af1fc8a845f040f2ea46a2739bf5c5470b7460553b6119535f612"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e73f89c2-6ee9-4558-84ec-e58f141b6d5e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e73f89c2-6ee9-4558-84ec-e58f141b6d5e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e73f89c2-6ee9-4558-84ec-e58f141b6d5e",
|
|
"hashes": {
|
|
"SHA-256": "8f1b0e9616c7ccb0df26d0b85b3e4e69c199929f4f27748b69f541c2c7ccea21"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a1c74d7d-878f-4b3c-82b4-7f3d4e4788fd",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a1c74d7d-878f-4b3c-82b4-7f3d4e4788fd"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a1c74d7d-878f-4b3c-82b4-7f3d4e4788fd",
|
|
"hashes": {
|
|
"SHA-256": "ac5ea224dfed1017b0c5e7d8d03867f934808aa166d99b654fc310ff419623c3"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--dc8cb640-438c-40e1-b2e5-20a7f65f2b4e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--dc8cb640-438c-40e1-b2e5-20a7f65f2b4e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--dc8cb640-438c-40e1-b2e5-20a7f65f2b4e",
|
|
"hashes": {
|
|
"SHA-256": "799d682f1136c1fed2047032d803ee8efec3e07f1e078f97d3cc2c850f0b9b34"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--51a89789-c3a0-4643-b0f2-471bc10d0608",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--51a89789-c3a0-4643-b0f2-471bc10d0608"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--51a89789-c3a0-4643-b0f2-471bc10d0608",
|
|
"hashes": {
|
|
"SHA-256": "3412eb2c9b57ebfa2b4c571e5fe35016d8b7231f05998e3820ec2fc7d7eca90a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--ed968753-7bb3-4cac-aaa0-a3312e283ecd",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--ed968753-7bb3-4cac-aaa0-a3312e283ecd"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--ed968753-7bb3-4cac-aaa0-a3312e283ecd",
|
|
"hashes": {
|
|
"SHA-256": "bca7f9066e2f1fca2caa80804c07083aabd6879c5375c69f17e625ecbdc6cd7a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--53be3eac-43c8-4361-9e1c-bcaea232eea7",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--53be3eac-43c8-4361-9e1c-bcaea232eea7"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--53be3eac-43c8-4361-9e1c-bcaea232eea7",
|
|
"hashes": {
|
|
"SHA-256": "ceb8cef408ccaccfea1fb33da1a1f5859c3ad1df6738f8a428a02cf915aa998c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--8f70127c-d597-4ba4-a2da-4749301809bc",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--8f70127c-d597-4ba4-a2da-4749301809bc"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--8f70127c-d597-4ba4-a2da-4749301809bc",
|
|
"hashes": {
|
|
"SHA-256": "8134aa3d5bec6796a7ac0610573a10138e4bead7b50021eba329f5e11535e313"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--ddd37c4a-635e-4b99-8bc4-4b4ac9359abd",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--ddd37c4a-635e-4b99-8bc4-4b4ac9359abd"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--ddd37c4a-635e-4b99-8bc4-4b4ac9359abd",
|
|
"hashes": {
|
|
"SHA-256": "f73b0932b5a2b0ce769ef63a047042d2de840b420fdf0676307ed3f45cea1fd4"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--7453c13a-67d3-4977-983d-2ac981b055dc",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--7453c13a-67d3-4977-983d-2ac981b055dc"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--7453c13a-67d3-4977-983d-2ac981b055dc",
|
|
"hashes": {
|
|
"SHA-256": "5203d899b56ac5688b5ee1262632667d43494f4a3dfae413719dedbca356de83"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--69d65a89-fb9d-45d4-8045-c00f7cf3df58",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--69d65a89-fb9d-45d4-8045-c00f7cf3df58"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--69d65a89-fb9d-45d4-8045-c00f7cf3df58",
|
|
"hashes": {
|
|
"SHA-256": "112e3726f2e18165129b3d16b4fd938b2c00a3358e18979f3b23639a09998df2"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e2c73f25-1310-4e18-90dd-9f7d2f8b50aa",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e2c73f25-1310-4e18-90dd-9f7d2f8b50aa"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e2c73f25-1310-4e18-90dd-9f7d2f8b50aa",
|
|
"hashes": {
|
|
"SHA-256": "dc3682b099f9d6f1d6ca2092db1be227a1a3fdfdf8b31f0076fe462b34c24d6e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--8b838279-0c8b-41ee-9584-7e37322960f7",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--8b838279-0c8b-41ee-9584-7e37322960f7"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--8b838279-0c8b-41ee-9584-7e37322960f7",
|
|
"hashes": {
|
|
"SHA-256": "f258b3b1b3f1bee952a76e2e4ef2f14fe15e75c68132eab307b101a0696a4850"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--88537d20-9383-4da4-a520-2d32e73c9ade",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--88537d20-9383-4da4-a520-2d32e73c9ade"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--88537d20-9383-4da4-a520-2d32e73c9ade",
|
|
"hashes": {
|
|
"SHA-256": "140cb0865508570daa56a4d3079d82304ed3c59241297ad6ba12650b4270b06b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--7e967d55-ff8f-4951-aca8-344b01c5e3e4",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--7e967d55-ff8f-4951-aca8-344b01c5e3e4"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--7e967d55-ff8f-4951-aca8-344b01c5e3e4",
|
|
"hashes": {
|
|
"SHA-256": "f9f254fcfbc093cf1799efa291313fd39e6760ce5fbe06607df85b0c6bd53ae4"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--dec5ec7a-410a-447f-8dea-008a726f4bd2",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--dec5ec7a-410a-447f-8dea-008a726f4bd2"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--dec5ec7a-410a-447f-8dea-008a726f4bd2",
|
|
"hashes": {
|
|
"SHA-256": "d85ee4b7609ae5e93a36f328c28613066699e194fa71be6fdd68996d2a6fd9e6"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--78bce9cf-280c-498f-a292-072544de466e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--78bce9cf-280c-498f-a292-072544de466e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--78bce9cf-280c-498f-a292-072544de466e",
|
|
"hashes": {
|
|
"SHA-256": "01c06ac7380d819a86ab7cbbc41cc1fc4b50cb87e491f40cc592067f14f74227"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--33a62c11-7ffc-4eda-83d4-e0dbc1069eb9",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--33a62c11-7ffc-4eda-83d4-e0dbc1069eb9"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--33a62c11-7ffc-4eda-83d4-e0dbc1069eb9",
|
|
"hashes": {
|
|
"SHA-256": "9204adebc761c0cca881c4b3f5d4059bc4203eed10b44bfbc4c7ce057725dd86"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--620bc29b-145c-4730-b4da-611c28ed22b1",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--620bc29b-145c-4730-b4da-611c28ed22b1"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--620bc29b-145c-4730-b4da-611c28ed22b1",
|
|
"hashes": {
|
|
"SHA-256": "02ea24c34b6de335237c164b212c65efbfb6ea3f8f771b303c28fec371af78d5"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--d99cabf1-f5a2-44df-a014-71adfdf1b53c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--d99cabf1-f5a2-44df-a014-71adfdf1b53c"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--d99cabf1-f5a2-44df-a014-71adfdf1b53c",
|
|
"hashes": {
|
|
"SHA-256": "5891234b02305216074ad1a792629c90604037a904f6282eec16dc3875fc8bc9"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--00d897d6-12f9-417e-a333-27d60cf4e4c9",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--00d897d6-12f9-417e-a333-27d60cf4e4c9"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--00d897d6-12f9-417e-a333-27d60cf4e4c9",
|
|
"hashes": {
|
|
"SHA-256": "cb268038003d622e93ef2902920606e66061d8288e45b100c4bf143ad86d858e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--8c752595-2f48-45b5-8ec9-1531f5cb885a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--8c752595-2f48-45b5-8ec9-1531f5cb885a"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--8c752595-2f48-45b5-8ec9-1531f5cb885a",
|
|
"hashes": {
|
|
"SHA-256": "5cb17598d9f5722235450195ff540b52ea9532f9813976ffde25b9def1fcdc37"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--38410e47-85a0-44b0-89e9-addb782d4e02",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--38410e47-85a0-44b0-89e9-addb782d4e02"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--38410e47-85a0-44b0-89e9-addb782d4e02",
|
|
"hashes": {
|
|
"SHA-256": "fad0ed0cd1f0096c2fffc2885b3b1bcb15e7b2ed2dd92b5875cbf843aec907a8"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--01bc9d0a-7cec-4720-9cf6-083c781600ac",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--01bc9d0a-7cec-4720-9cf6-083c781600ac"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--01bc9d0a-7cec-4720-9cf6-083c781600ac",
|
|
"hashes": {
|
|
"SHA-256": "8e6db626085778267c8aedc138c822fc2206c995050b985b88d6bfdaa7f4ac22"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--ba16f230-45f4-4c82-aacf-4593a4fa25e0",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--ba16f230-45f4-4c82-aacf-4593a4fa25e0"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--ba16f230-45f4-4c82-aacf-4593a4fa25e0",
|
|
"hashes": {
|
|
"SHA-256": "51977da974c77a2b1c968248eff04bf391c69183020c115e5348b7116791884a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--5bfcba86-d40d-4fec-acf4-e411c1099e93",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--5bfcba86-d40d-4fec-acf4-e411c1099e93"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--5bfcba86-d40d-4fec-acf4-e411c1099e93",
|
|
"hashes": {
|
|
"SHA-256": "39342904ee0137806331ce5ea4526b6d881a5402ceca4fef63781c91fd83171e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--69f54b06-20dd-465c-9f7e-49a7f171d677",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--69f54b06-20dd-465c-9f7e-49a7f171d677"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--69f54b06-20dd-465c-9f7e-49a7f171d677",
|
|
"hashes": {
|
|
"SHA-256": "1ac297aecd85811ee6117cc60749b3aa32ba23a6c1eebb2decc5dde174fcf6a5"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--76543f65-d971-4dec-8897-a388edd9936c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--76543f65-d971-4dec-8897-a388edd9936c"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--76543f65-d971-4dec-8897-a388edd9936c",
|
|
"hashes": {
|
|
"SHA-256": "91f38232f1e11b1b43393c42ac822b686ff187fd11291318f63f90a276c1738b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--ab1c2d9a-753d-4182-83d3-28800fddc2f2",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--ab1c2d9a-753d-4182-83d3-28800fddc2f2"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--ab1c2d9a-753d-4182-83d3-28800fddc2f2",
|
|
"hashes": {
|
|
"SHA-256": "e9ca01a8d7491391889f9e11a44263b7f86a4ad5d87d78d70580a16ef3e77667"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a94fb3ed-9d8a-4c16-bfd0-f885aef634d3",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a94fb3ed-9d8a-4c16-bfd0-f885aef634d3"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a94fb3ed-9d8a-4c16-bfd0-f885aef634d3",
|
|
"hashes": {
|
|
"SHA-256": "90c79efa93a3b5ae03a80e4678b53215bc2fe8c5931f03c46a0d7c060df3293f"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--3ea7f09e-9a0a-4fee-8e99-c463795fc40f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--3ea7f09e-9a0a-4fee-8e99-c463795fc40f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--3ea7f09e-9a0a-4fee-8e99-c463795fc40f",
|
|
"hashes": {
|
|
"SHA-256": "a0625d05405299c996ad3a060dcb7319b4fc5ee47f0515f8dab71a6d6ab624c2"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e83d4bd1-28f6-4ef0-a2c6-6ea6f34f8397",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e83d4bd1-28f6-4ef0-a2c6-6ea6f34f8397"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e83d4bd1-28f6-4ef0-a2c6-6ea6f34f8397",
|
|
"hashes": {
|
|
"SHA-256": "5640d2519b9d390b7350944a24bf69ab45ca905f4c3594099ddae3340c19c867"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--bd3ca8ef-10b4-4986-a41e-5fa8ea92a64d",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--bd3ca8ef-10b4-4986-a41e-5fa8ea92a64d"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--bd3ca8ef-10b4-4986-a41e-5fa8ea92a64d",
|
|
"hashes": {
|
|
"SHA-256": "5b3bb026ad01ea693afc1e8c7669fd478258ee335bee9baff31a8edf691b8b4c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--21e292f0-303a-4fe5-bf39-5de7fd087e01",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--21e292f0-303a-4fe5-bf39-5de7fd087e01"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--21e292f0-303a-4fe5-bf39-5de7fd087e01",
|
|
"hashes": {
|
|
"SHA-256": "7d4d3c943cfd150bdc1a32396e8dcc09b7b9ced7ca8f72df6c48120ba74a1f6d"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--201b890b-be02-482d-a6ac-fd2db2dbec45",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--201b890b-be02-482d-a6ac-fd2db2dbec45"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--201b890b-be02-482d-a6ac-fd2db2dbec45",
|
|
"hashes": {
|
|
"SHA-256": "641438b35830029a0cc6213ec7f4c128c51f9b65069f863c35f517ce569b2ae8"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--4260cb4c-ffc1-4807-808e-1e05e31709a6",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--4260cb4c-ffc1-4807-808e-1e05e31709a6"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--4260cb4c-ffc1-4807-808e-1e05e31709a6",
|
|
"hashes": {
|
|
"SHA-256": "eccd52a6cfd8e1277f0f204b248f032d87821a4901536f5faa9f3fe2550060d8"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--157c2b6b-3f8f-42b7-b656-7b49499588a8",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--157c2b6b-3f8f-42b7-b656-7b49499588a8"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--157c2b6b-3f8f-42b7-b656-7b49499588a8",
|
|
"hashes": {
|
|
"SHA-256": "7faaebce62576dd049b7c8987d9519699df4df1e498e1ec157de6515857e8b1b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--53ed53c2-c01c-4ea2-b4bc-7e6f9374900f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--53ed53c2-c01c-4ea2-b4bc-7e6f9374900f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--53ed53c2-c01c-4ea2-b4bc-7e6f9374900f",
|
|
"hashes": {
|
|
"SHA-256": "62baf9934d6116716eaba7d6d00b4d95048ce816283ba0d3c66e5b4f86154a28"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--043d3cce-129a-4217-ac58-86dea5e92b75",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--043d3cce-129a-4217-ac58-86dea5e92b75"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--043d3cce-129a-4217-ac58-86dea5e92b75",
|
|
"hashes": {
|
|
"SHA-256": "9a7d54c3efef4809036f88d86b67ca1f21c08fdb4769d7e97d7562165b5082e5"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--0d9aa573-f43d-4ba2-b80f-7a6007a48dee",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--0d9aa573-f43d-4ba2-b80f-7a6007a48dee"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--0d9aa573-f43d-4ba2-b80f-7a6007a48dee",
|
|
"hashes": {
|
|
"SHA-256": "845866aedc4a4e17abb04ae875e967161cc5e7dda94b996bcdfec39c9b68737c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--576c66b5-34dc-478a-8fd8-aa5bad4081fb",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--576c66b5-34dc-478a-8fd8-aa5bad4081fb"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--576c66b5-34dc-478a-8fd8-aa5bad4081fb",
|
|
"hashes": {
|
|
"SHA-256": "bfc90268d234ef38682c77b2d91f2c1b6d8396b0494e2958626e94d21556555c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--c2037484-bed4-4eb7-9506-498474e87039",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--c2037484-bed4-4eb7-9506-498474e87039"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--c2037484-bed4-4eb7-9506-498474e87039",
|
|
"hashes": {
|
|
"SHA-256": "dc8390499c253eac16c9fe920cf8615e2d0e515d35fb7dca51d8204760f83b1f"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--7e658b78-9798-4608-bf91-f88bf8042646",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--7e658b78-9798-4608-bf91-f88bf8042646"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--7e658b78-9798-4608-bf91-f88bf8042646",
|
|
"hashes": {
|
|
"SHA-256": "91c7198f36977fed15e8585a7c5e0e03079959d461f9cd6cc34627484f67c6d9"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--7b0acbe8-4a6e-4c90-8d85-50db5924b9fc",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--7b0acbe8-4a6e-4c90-8d85-50db5924b9fc"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--7b0acbe8-4a6e-4c90-8d85-50db5924b9fc",
|
|
"hashes": {
|
|
"SHA-256": "193631dba484489a2413087a5b64dbed387b607b74825d07721710fd92ce5910"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a954af5d-5157-490d-9f2e-c56d3ba8153e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a954af5d-5157-490d-9f2e-c56d3ba8153e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a954af5d-5157-490d-9f2e-c56d3ba8153e",
|
|
"hashes": {
|
|
"SHA-256": "4808f18d9454149798566d88e2377e3a1cee73149835593051e01d93580c1a13"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--975570f4-bf7a-4281-94f7-1d73a77f4ec0",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--975570f4-bf7a-4281-94f7-1d73a77f4ec0"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--975570f4-bf7a-4281-94f7-1d73a77f4ec0",
|
|
"hashes": {
|
|
"SHA-256": "7b21b428a8f3ab3bff7f65d5f3631e0944c83833f5de871a2c83428ad465b52f"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e7586da2-c0ec-4627-8dd3-d7238882d7ba",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e7586da2-c0ec-4627-8dd3-d7238882d7ba"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e7586da2-c0ec-4627-8dd3-d7238882d7ba",
|
|
"hashes": {
|
|
"SHA-256": "d93093fb0646daa14797dacc6845bb46475a985c5e63f38b4d910be2b0aa615a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e221f6e2-ede8-4f99-9dcb-e087536252db",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e221f6e2-ede8-4f99-9dcb-e087536252db"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e221f6e2-ede8-4f99-9dcb-e087536252db",
|
|
"hashes": {
|
|
"SHA-256": "caa8d805b7aff78ab01f2a5ff81426e55cf0f9d7ddfcaf0856cbca0a75c971e2"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--40e5c04d-e581-4b47-878e-4acd4bc4b274",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--40e5c04d-e581-4b47-878e-4acd4bc4b274"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--40e5c04d-e581-4b47-878e-4acd4bc4b274",
|
|
"hashes": {
|
|
"SHA-256": "5801e2686141c6d2944ffe798e1c7671fc904655cb047e87d3d9c58eb358cf2e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--69a29e8e-3bec-4ec7-b950-d31ec0657e90",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--69a29e8e-3bec-4ec7-b950-d31ec0657e90"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--69a29e8e-3bec-4ec7-b950-d31ec0657e90",
|
|
"hashes": {
|
|
"SHA-256": "ebb60f16f22f800241d9f849f12d8f957cc1bc457dfabd13997a1587e9ebb2d5"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--59cf9e74-9841-4838-864a-212e73b851fc",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--59cf9e74-9841-4838-864a-212e73b851fc"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--59cf9e74-9841-4838-864a-212e73b851fc",
|
|
"hashes": {
|
|
"SHA-256": "13854c219978deabd657a242df591b0dedcffa480523bc28a7d0cc1790232ce6"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--2767634e-da83-4344-b9ca-12e666cd621e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--2767634e-da83-4344-b9ca-12e666cd621e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--2767634e-da83-4344-b9ca-12e666cd621e",
|
|
"hashes": {
|
|
"SHA-256": "b6b571644dac5294b3253fdf72a0489923d6446c9c6910270f523f689e760ffa"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--c51e898d-72b1-484f-a5f8-a18f48094f7a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--c51e898d-72b1-484f-a5f8-a18f48094f7a"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--c51e898d-72b1-484f-a5f8-a18f48094f7a",
|
|
"hashes": {
|
|
"SHA-256": "a7a5b4cca19fe4b9b8fdc1a967b36e721ceda04f93c5a01902c2873fd5d6ff83"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--4d523df8-ad17-448d-9b94-a3338148c729",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--4d523df8-ad17-448d-9b94-a3338148c729"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--4d523df8-ad17-448d-9b94-a3338148c729",
|
|
"hashes": {
|
|
"SHA-256": "b9d3da101a7ce14a9689c2c602375d75eb5e6931130ce60a292e0188ac7f53d4"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--99c6502f-7d64-4bf7-ae7e-ef62cf64c29b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--99c6502f-7d64-4bf7-ae7e-ef62cf64c29b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--99c6502f-7d64-4bf7-ae7e-ef62cf64c29b",
|
|
"hashes": {
|
|
"SHA-256": "3bad0537b33c955cabbd99abda8f86645d657a2a6dd1c43488c08c95e6a2a454"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--818b463b-9a61-47a9-af0b-f10506bc7901",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--818b463b-9a61-47a9-af0b-f10506bc7901"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--818b463b-9a61-47a9-af0b-f10506bc7901",
|
|
"hashes": {
|
|
"SHA-256": "f5a07994104c28575b7a1c1ad1e938e1d4a3604caca0c9cad85d679e5f42498c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--add41fc6-4637-4f60-a65c-4c18ffe38036",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--add41fc6-4637-4f60-a65c-4c18ffe38036"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--add41fc6-4637-4f60-a65c-4c18ffe38036",
|
|
"hashes": {
|
|
"SHA-256": "2cafef15e141176c36dc65c054b5627360e6a0120d104addac68bb2b92bef6fc"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--057e2d02-cf69-49f1-895f-1afa8f98a00d",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--057e2d02-cf69-49f1-895f-1afa8f98a00d"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--057e2d02-cf69-49f1-895f-1afa8f98a00d",
|
|
"hashes": {
|
|
"SHA-256": "a8240c3c8a6023301a5580bfa0234c0ab6842088f5bea9248a004147b5d045c2"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--72f5e386-6e73-42b3-8fb2-0c373d2735f3",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--72f5e386-6e73-42b3-8fb2-0c373d2735f3"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--72f5e386-6e73-42b3-8fb2-0c373d2735f3",
|
|
"hashes": {
|
|
"SHA-256": "5d8d98707dafffa5fcad1eb1315a216cf2ded5b43565abb1595cb0442110897c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--73b393de-0c82-4f7c-8fd3-a5b9255fd096",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--73b393de-0c82-4f7c-8fd3-a5b9255fd096"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--73b393de-0c82-4f7c-8fd3-a5b9255fd096",
|
|
"hashes": {
|
|
"SHA-256": "cf5b7c2f9cc1460be0f9726dba5f43ba9c5347e562d4c2552b1bacd4b44e9ec3"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--19b51de2-5178-498f-a5a6-ce38790ad8de",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--19b51de2-5178-498f-a5a6-ce38790ad8de"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--19b51de2-5178-498f-a5a6-ce38790ad8de",
|
|
"hashes": {
|
|
"SHA-256": "beab49d18e004430d4291c18ceb2779a6fe227a29323f1ad534438aaaf9824a8"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--c4c6bb81-8e68-4a4b-944c-d222dcc2088b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--c4c6bb81-8e68-4a4b-944c-d222dcc2088b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--c4c6bb81-8e68-4a4b-944c-d222dcc2088b",
|
|
"hashes": {
|
|
"SHA-256": "b8243e7f88a7d70ec6997663dfe5e6f990934ca243bd263c322e47264b7beae7"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--caf011df-9dc6-4ac5-927d-ac7e6736aa6b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--caf011df-9dc6-4ac5-927d-ac7e6736aa6b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--caf011df-9dc6-4ac5-927d-ac7e6736aa6b",
|
|
"hashes": {
|
|
"SHA-256": "fa96ec5366f0ce4c02369861c47d09cce58cc26d10a269821ff8e8c6351f98da"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e326e2a4-9dc5-4664-a1e4-7988d17fe59e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e326e2a4-9dc5-4664-a1e4-7988d17fe59e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e326e2a4-9dc5-4664-a1e4-7988d17fe59e",
|
|
"hashes": {
|
|
"SHA-256": "eef0dbc13ebed9e6f411cb9e51d19445f39c7322a763b9eeae079e8d29094832"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--ccb4525a-72ba-4161-8eba-434f08a9d5d7",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--ccb4525a-72ba-4161-8eba-434f08a9d5d7"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--ccb4525a-72ba-4161-8eba-434f08a9d5d7",
|
|
"hashes": {
|
|
"SHA-256": "ee43304e01d31d78b51250f7a7c4833117d0e98ca9f02e7a0fab330b2c898d0a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a592c54e-ca74-47de-bee0-21529ae0d611",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a592c54e-ca74-47de-bee0-21529ae0d611"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a592c54e-ca74-47de-bee0-21529ae0d611",
|
|
"hashes": {
|
|
"SHA-256": "1b02a69e864f3cee070ecaf1e2b21d24220235cc5c7c868ff398980e5b62d5bc"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--25efabc1-05b6-47aa-a32f-5a6c8ff54ba3",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--25efabc1-05b6-47aa-a32f-5a6c8ff54ba3"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--25efabc1-05b6-47aa-a32f-5a6c8ff54ba3",
|
|
"hashes": {
|
|
"SHA-256": "32725acaafa1fde8506bd98da3f600929f61bfe09dfc39870a451f803beb7d4b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--7aba8228-4077-4cac-b6db-2916d7888cf2",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--7aba8228-4077-4cac-b6db-2916d7888cf2"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--7aba8228-4077-4cac-b6db-2916d7888cf2",
|
|
"hashes": {
|
|
"SHA-256": "ad7db33177fa587eaf9703db0f0dac2581c6130557f46842fd3b168d14c64fc8"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--c4a9911c-0918-4326-b400-5d721f644440",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--c4a9911c-0918-4326-b400-5d721f644440"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--c4a9911c-0918-4326-b400-5d721f644440",
|
|
"hashes": {
|
|
"SHA-256": "2e0805bffc03503832a3708ef83c7342910d43b837003af4d4ec94d54a1fa48b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--f4b269d8-8217-4412-bd99-26200157afbf",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--f4b269d8-8217-4412-bd99-26200157afbf"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--f4b269d8-8217-4412-bd99-26200157afbf",
|
|
"hashes": {
|
|
"SHA-256": "00438ac12bfe890592558b8ec7d0286e4c85236e92dd967a76b623a099455189"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--cc304b30-a9bf-4d9e-bd21-d99c854445c6",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--cc304b30-a9bf-4d9e-bd21-d99c854445c6"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--cc304b30-a9bf-4d9e-bd21-d99c854445c6",
|
|
"hashes": {
|
|
"SHA-256": "c58c16c3b5a65caad7b9f8851e25d0889b8833c77901a073388931d48d3dde2c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--0bca24aa-5706-40a6-b008-821bf34b0c57",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--0bca24aa-5706-40a6-b008-821bf34b0c57"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--0bca24aa-5706-40a6-b008-821bf34b0c57",
|
|
"hashes": {
|
|
"SHA-256": "9a7ace6bd52d51d9d97a06bc2516049462e83db49a69ad385f94064f29ade1fd"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--5321fa26-caf6-4455-a8cc-38900e8a5ad1",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--5321fa26-caf6-4455-a8cc-38900e8a5ad1"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--5321fa26-caf6-4455-a8cc-38900e8a5ad1",
|
|
"hashes": {
|
|
"SHA-256": "ab5ab7385fb553fa36c63c9021f38e836461f751c0f8ced0aa103733a463942d"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a7708f5e-9f15-4351-81f2-3f9226cc8435",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a7708f5e-9f15-4351-81f2-3f9226cc8435"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a7708f5e-9f15-4351-81f2-3f9226cc8435",
|
|
"hashes": {
|
|
"SHA-256": "9ec1e50137deeb16ab3937d07f725acda409658bd4e3bf7f06e3e65c71efe4c9"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--0e7fb73e-995e-4d97-97a8-0ac702a0826a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--0e7fb73e-995e-4d97-97a8-0ac702a0826a"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--0e7fb73e-995e-4d97-97a8-0ac702a0826a",
|
|
"hashes": {
|
|
"SHA-256": "dbc9ef77bbc310283e22fe7140a55dde1e8d2975c6e7527ed8b5b6167caff0ac"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--215f6c64-468c-4c67-ba06-1afbb7b20b48",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--215f6c64-468c-4c67-ba06-1afbb7b20b48"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--215f6c64-468c-4c67-ba06-1afbb7b20b48",
|
|
"hashes": {
|
|
"SHA-256": "248c3b210be52526a6f4f9333e0333bd962c00afc51ea26e5aa14d9d0fd400c6"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e40ce846-3560-4ad4-b24a-383bcb3260e1",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e40ce846-3560-4ad4-b24a-383bcb3260e1"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e40ce846-3560-4ad4-b24a-383bcb3260e1",
|
|
"hashes": {
|
|
"SHA-256": "c2f31eb16ac9c1570157ae82571aae2a29024ef64351ef83c6528be3dc7365d2"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--301ef60b-0b1d-4735-a122-ac7aa543ecf2",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--301ef60b-0b1d-4735-a122-ac7aa543ecf2"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--301ef60b-0b1d-4735-a122-ac7aa543ecf2",
|
|
"hashes": {
|
|
"SHA-256": "12bc39e341d8a34d49daa07980d7eeeff485247a66c0ce5d02ca67530fe4409a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1345cf51-1063-4683-9d37-dab3aa2310b0",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:38.000Z",
|
|
"modified": "2021-03-31T15:31:38.000Z",
|
|
"first_observed": "2021-03-31T15:31:38Z",
|
|
"last_observed": "2021-03-31T15:31:38Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1345cf51-1063-4683-9d37-dab3aa2310b0"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1345cf51-1063-4683-9d37-dab3aa2310b0",
|
|
"hashes": {
|
|
"SHA-256": "43d706e961b91e1b02446e94100dce40a9b4019c6b43cde5281033ea3e4024bc"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--b02a62d8-3bfa-4939-ad0f-86006b7fbdb2",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--b02a62d8-3bfa-4939-ad0f-86006b7fbdb2"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--b02a62d8-3bfa-4939-ad0f-86006b7fbdb2",
|
|
"hashes": {
|
|
"SHA-256": "1542b160836efce062826ff0a622e020d55e081018e5654e3b41a2b0267d2758"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--ceafc0ac-6da0-43fc-b3ab-3093188a69fe",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--ceafc0ac-6da0-43fc-b3ab-3093188a69fe"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--ceafc0ac-6da0-43fc-b3ab-3093188a69fe",
|
|
"hashes": {
|
|
"SHA-256": "83408d34305732c1478095b093d7ba0a2ec8d64d322796b708e5aad4351b848c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--bb7a1f5d-8cd7-457e-9ec0-6f5808e70ca2",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--bb7a1f5d-8cd7-457e-9ec0-6f5808e70ca2"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--bb7a1f5d-8cd7-457e-9ec0-6f5808e70ca2",
|
|
"hashes": {
|
|
"SHA-256": "7bde4d2fda0570850a1c86e97dada058d06ee055f91873a06b8606b89b4bfca4"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--77f3b013-739c-4f29-94e5-556b749a0f53",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--77f3b013-739c-4f29-94e5-556b749a0f53"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--77f3b013-739c-4f29-94e5-556b749a0f53",
|
|
"hashes": {
|
|
"SHA-256": "506f1a4d802eda86bbfbc554cc3ba0f61af089618267bf03604a52de10719a31"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--4280fc07-0c53-4cb5-ac7e-3740c6c1554a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--4280fc07-0c53-4cb5-ac7e-3740c6c1554a"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--4280fc07-0c53-4cb5-ac7e-3740c6c1554a",
|
|
"hashes": {
|
|
"SHA-256": "ad6ab3181e7657c051069dfddeffa4d6384d3178186857b1e29b76e5023432b2"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--8091bcbd-b968-433e-b348-6a77fa26b61e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--8091bcbd-b968-433e-b348-6a77fa26b61e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--8091bcbd-b968-433e-b348-6a77fa26b61e",
|
|
"hashes": {
|
|
"SHA-256": "3537461530d40bf6aa827cbd6d641a926d64fd096773983d6d2ea4261a269f42"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--8fc50598-5bee-4036-bf85-d5278145521f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--8fc50598-5bee-4036-bf85-d5278145521f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--8fc50598-5bee-4036-bf85-d5278145521f",
|
|
"hashes": {
|
|
"SHA-256": "5ff836d3f691c9e478bb86f7a0b216082062c747e6e3faa85df246ef5a5bfb32"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--01e06b30-61bc-425a-873e-b72ad75ee3e2",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--01e06b30-61bc-425a-873e-b72ad75ee3e2"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--01e06b30-61bc-425a-873e-b72ad75ee3e2",
|
|
"hashes": {
|
|
"SHA-256": "8b1b3d601dd51462aee25807b944859baeeba1e497b77b708770ffde1dee17fd"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--29afef9f-184d-4f35-b98f-a8abd995bb64",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--29afef9f-184d-4f35-b98f-a8abd995bb64"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--29afef9f-184d-4f35-b98f-a8abd995bb64",
|
|
"hashes": {
|
|
"SHA-256": "24d230d088719b7164218d1dbc746d85c10d0d37da1c9ba30c5997bc1655d96d"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--856915a7-c3f4-406a-a65f-bafa07323c7c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--856915a7-c3f4-406a-a65f-bafa07323c7c"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--856915a7-c3f4-406a-a65f-bafa07323c7c",
|
|
"hashes": {
|
|
"SHA-256": "d11f17415a4d2dc4cc0910425abbf2b2440ad7d9a0720ff5af3b9f864684fb08"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--55c51215-83ae-4b66-98f1-a0f39828e7ec",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--55c51215-83ae-4b66-98f1-a0f39828e7ec"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--55c51215-83ae-4b66-98f1-a0f39828e7ec",
|
|
"hashes": {
|
|
"SHA-256": "ed97006d4bdae028446ddf585a99be3978b659f78eec0b9aaa095b7269203aa4"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--4290dd7c-5e3e-47ba-833f-53049f5716e1",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--4290dd7c-5e3e-47ba-833f-53049f5716e1"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--4290dd7c-5e3e-47ba-833f-53049f5716e1",
|
|
"hashes": {
|
|
"SHA-256": "5468653e26a349792abfe4c3c11384270d214e92831d0f9ed76576b264c35c0c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--2b6369b8-1cb7-44f4-af4b-05cdd0f9c3b2",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--2b6369b8-1cb7-44f4-af4b-05cdd0f9c3b2"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--2b6369b8-1cb7-44f4-af4b-05cdd0f9c3b2",
|
|
"hashes": {
|
|
"SHA-256": "2914da027c0f19da9f9b9053086849c286b9e5f4ff96b34828638fb1e1822210"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--036e290d-258a-439b-a1af-12f66655bc30",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--036e290d-258a-439b-a1af-12f66655bc30"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--036e290d-258a-439b-a1af-12f66655bc30",
|
|
"hashes": {
|
|
"SHA-256": "fb161df933953af1df30a3af9479d832230dc403386e85f4883e00ec0c62d411"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--60b2e835-b8d7-4488-aba4-13d76745ee12",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--60b2e835-b8d7-4488-aba4-13d76745ee12"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--60b2e835-b8d7-4488-aba4-13d76745ee12",
|
|
"hashes": {
|
|
"SHA-256": "2fe763e17a58fa84e3cb8186e5aea55d66ca12c1e3fb23480489238fbd204b45"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--455ca6e2-3994-479c-8c58-d6efb9e78c55",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--455ca6e2-3994-479c-8c58-d6efb9e78c55"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--455ca6e2-3994-479c-8c58-d6efb9e78c55",
|
|
"hashes": {
|
|
"SHA-256": "723976603791f147e4502e7d5edcdb5f16ecee8f17319a7e12e9671b7323f936"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--974943cd-4acd-4f61-a746-cafe0d102692",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--974943cd-4acd-4f61-a746-cafe0d102692"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--974943cd-4acd-4f61-a746-cafe0d102692",
|
|
"hashes": {
|
|
"SHA-256": "00a8b7db92fb0f8f1c453459c8b44154ad057777cd220c90c95f3b9e92699b18"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--88b0bace-422d-4f94-a2e7-b13705e65029",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--88b0bace-422d-4f94-a2e7-b13705e65029"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--88b0bace-422d-4f94-a2e7-b13705e65029",
|
|
"hashes": {
|
|
"SHA-256": "aebe26001f908a6e9e8c9986bc382077d63e2b38918967806aff35c1417874ad"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--492ad67e-8b0c-4170-816d-999fa98841d3",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--492ad67e-8b0c-4170-816d-999fa98841d3"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--492ad67e-8b0c-4170-816d-999fa98841d3",
|
|
"hashes": {
|
|
"SHA-256": "403a339f3c5396896f82e8931064454ffc278d2efb459137238a52f1d493024b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--d666c232-909d-4da2-b48f-895e68f1e3a9",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--d666c232-909d-4da2-b48f-895e68f1e3a9"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--d666c232-909d-4da2-b48f-895e68f1e3a9",
|
|
"hashes": {
|
|
"SHA-256": "ed3a4dad2e90725735d3c4cb92fd1d5f93af51740ae20acc7e62a5741e6d37f9"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--47efee67-40f4-4eff-bbaa-82a79e0d6c18",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--47efee67-40f4-4eff-bbaa-82a79e0d6c18"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--47efee67-40f4-4eff-bbaa-82a79e0d6c18",
|
|
"hashes": {
|
|
"SHA-256": "857b20d13e146c601eefa14079d6acceaa7a5d7769a5182dd5facbe53277615b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--274f792d-7734-44e6-9293-bbfd4d4fb7ce",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--274f792d-7734-44e6-9293-bbfd4d4fb7ce"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--274f792d-7734-44e6-9293-bbfd4d4fb7ce",
|
|
"hashes": {
|
|
"SHA-256": "36973bb91c912d2dc7ffcd55266a550a6c6d796e15ce19edfea9a459f803a639"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--5519f369-5fc1-4237-abe9-995700169877",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--5519f369-5fc1-4237-abe9-995700169877"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--5519f369-5fc1-4237-abe9-995700169877",
|
|
"hashes": {
|
|
"SHA-256": "68db87c9b848bb9584ef73dad70d7541d21a68ec4a273d1f4a166d325ca56f81"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--896710a4-b31b-4828-9a5a-ddc0ac07d4e3",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--896710a4-b31b-4828-9a5a-ddc0ac07d4e3"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--896710a4-b31b-4828-9a5a-ddc0ac07d4e3",
|
|
"hashes": {
|
|
"SHA-256": "d5618ae98ac37a85673a75d5fe4d04a1877721bb5a66e845707cdc09f039e14a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--79cd7e25-c4e3-4954-9971-d85ed5717f46",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--79cd7e25-c4e3-4954-9971-d85ed5717f46"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--79cd7e25-c4e3-4954-9971-d85ed5717f46",
|
|
"hashes": {
|
|
"SHA-256": "851d5c82b006d053cdb23b9e27a206f9c42fa81a9f09269d1f42a5996776ed1a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--79e89051-663f-4507-8855-17ea5e8fe260",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--79e89051-663f-4507-8855-17ea5e8fe260"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--79e89051-663f-4507-8855-17ea5e8fe260",
|
|
"hashes": {
|
|
"SHA-256": "2ce1a3fa1edb49e9d8c6ca1fe2b70cb4b235d972d7fd06c30282f2ba554bcbed"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--c84602c1-7356-414a-aa72-59b4d4b8de16",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--c84602c1-7356-414a-aa72-59b4d4b8de16"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--c84602c1-7356-414a-aa72-59b4d4b8de16",
|
|
"hashes": {
|
|
"SHA-256": "abf02bb5015f67cc031b0c7fb3fcd9edeef289fe4e5cab3739ae9cff22957dc5"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--db1f6d21-b287-4535-90aa-2003afa1cff9",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--db1f6d21-b287-4535-90aa-2003afa1cff9"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--db1f6d21-b287-4535-90aa-2003afa1cff9",
|
|
"hashes": {
|
|
"SHA-256": "dce87e823eff3c7484d9c6720d6042842552f07af5a54d6b35b5718e24d5970b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--0f8d800f-770f-47f6-82c4-d4b1a472b33a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--0f8d800f-770f-47f6-82c4-d4b1a472b33a"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--0f8d800f-770f-47f6-82c4-d4b1a472b33a",
|
|
"hashes": {
|
|
"SHA-256": "db0296ab46537cd6c65f56e9a5233d14fa0ad5ef8507b17c3aee96237aee34f8"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--c92d5e1a-7778-4638-9a56-45a2242eaaa6",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--c92d5e1a-7778-4638-9a56-45a2242eaaa6"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--c92d5e1a-7778-4638-9a56-45a2242eaaa6",
|
|
"hashes": {
|
|
"SHA-256": "74c590c364e4510e60713508d976b06589d638a4fe9e5d1338e6c2f4bf0a7c1a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--d18dcf59-4e53-4c3a-bdcf-2770c9c3b0be",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--d18dcf59-4e53-4c3a-bdcf-2770c9c3b0be"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--d18dcf59-4e53-4c3a-bdcf-2770c9c3b0be",
|
|
"hashes": {
|
|
"SHA-256": "67290959a99562f141fae5cf643ad907980e44283bd1bd006015552cf0b2c955"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1569fbb6-1765-492a-af95-34680114102a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1569fbb6-1765-492a-af95-34680114102a"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1569fbb6-1765-492a-af95-34680114102a",
|
|
"hashes": {
|
|
"SHA-256": "75c2f3a092108a731849444da732a037d596f71f758fba914715f2b16d8bc8bf"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--87a17e7f-a93e-4d90-bfe6-490c2612ba87",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--87a17e7f-a93e-4d90-bfe6-490c2612ba87"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--87a17e7f-a93e-4d90-bfe6-490c2612ba87",
|
|
"hashes": {
|
|
"SHA-256": "109a98bfd9bbccf644db8625d1a717877c5cea4b0b847949bd34d0da257bf305"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--8c005e11-e2d7-4cb3-9d08-d81a8053a9d7",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--8c005e11-e2d7-4cb3-9d08-d81a8053a9d7"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--8c005e11-e2d7-4cb3-9d08-d81a8053a9d7",
|
|
"hashes": {
|
|
"SHA-256": "3b886446aa1e95835bd6a8f8cf8006bd22bbb47dc066107bcba290eba6e6ac22"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--6031f779-8263-4223-8780-d800991391e5",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--6031f779-8263-4223-8780-d800991391e5"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--6031f779-8263-4223-8780-d800991391e5",
|
|
"hashes": {
|
|
"SHA-256": "73bb192fc98def5ab6ac6fa9c73074df84fc5ea0a729f7ebc1438f34f22c45b7"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--37d292b0-327a-4fee-a17e-a1ae5c2989ff",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--37d292b0-327a-4fee-a17e-a1ae5c2989ff"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--37d292b0-327a-4fee-a17e-a1ae5c2989ff",
|
|
"hashes": {
|
|
"SHA-256": "0a0794ccbb07effeb3583673325d927fa29fc1796c51945a944c8dc0d51e0382"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--d6480990-b6b3-459e-9bc6-3de1086c680f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--d6480990-b6b3-459e-9bc6-3de1086c680f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--d6480990-b6b3-459e-9bc6-3de1086c680f",
|
|
"hashes": {
|
|
"SHA-256": "a502fd0ddd29b251630234db5a5f2ef1c785469048b6b2e11d81dfff219b972b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--0674439c-b814-4b6d-a16a-84c0f5b8e75b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--0674439c-b814-4b6d-a16a-84c0f5b8e75b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--0674439c-b814-4b6d-a16a-84c0f5b8e75b",
|
|
"hashes": {
|
|
"SHA-256": "a80ce60bc7050508a2b5c0526070014e81c62662e8297eb794ed65c396630f72"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--638d37c3-5ead-496a-88d4-a824052ec95f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--638d37c3-5ead-496a-88d4-a824052ec95f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--638d37c3-5ead-496a-88d4-a824052ec95f",
|
|
"hashes": {
|
|
"SHA-256": "979176bfa7402a559a6205a4eb8f2ea9c2c2e075d545263d2aaa9254ca3f6d57"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--084f4888-4e5c-4591-9eb9-092dbcb97e75",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--084f4888-4e5c-4591-9eb9-092dbcb97e75"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--084f4888-4e5c-4591-9eb9-092dbcb97e75",
|
|
"hashes": {
|
|
"SHA-256": "836d0c95fadc13619ab8dacb382cf25e91523b9f99a197f94523f041cbd276bb"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--fdce10ad-b012-4129-8014-f77ddf94c744",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--fdce10ad-b012-4129-8014-f77ddf94c744"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--fdce10ad-b012-4129-8014-f77ddf94c744",
|
|
"hashes": {
|
|
"SHA-256": "6bdf798c4c40cc351a305cdfabf42371a6fe4cbf350d28cf48ae3fe7b978e996"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--bebb6bc1-ffcd-415a-9d93-a2eea7709b35",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--bebb6bc1-ffcd-415a-9d93-a2eea7709b35"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--bebb6bc1-ffcd-415a-9d93-a2eea7709b35",
|
|
"hashes": {
|
|
"SHA-256": "4e6be07ff566f21cddcdddba0ffb40e490305a14ff43abcec85c51f3b31a3a0e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--02975d10-4674-4ba7-a0e8-550fcf33c256",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--02975d10-4674-4ba7-a0e8-550fcf33c256"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--02975d10-4674-4ba7-a0e8-550fcf33c256",
|
|
"hashes": {
|
|
"SHA-256": "7c6a455a5e2d19db6ea61a683352a7886f25fade82629ca7471c58ead98cff84"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--6a4b9e7e-e06a-4224-8e43-630507ca8630",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--6a4b9e7e-e06a-4224-8e43-630507ca8630"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--6a4b9e7e-e06a-4224-8e43-630507ca8630",
|
|
"hashes": {
|
|
"SHA-256": "ab4cefcbc9a88f8c0bb54a0b9fafcb2a140910b93e3d3ebc0f401b47703d52e5"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e398366f-3146-4959-a817-a571130ad8dc",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e398366f-3146-4959-a817-a571130ad8dc"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e398366f-3146-4959-a817-a571130ad8dc",
|
|
"hashes": {
|
|
"SHA-256": "cb6119d1e74d20390d01f8faf708e709790fa278e12cfeb8c06cc425b9a9c607"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1ee15475-8039-4a94-8113-a22bdbc325c8",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1ee15475-8039-4a94-8113-a22bdbc325c8"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1ee15475-8039-4a94-8113-a22bdbc325c8",
|
|
"hashes": {
|
|
"SHA-256": "4f30bd20e104e635d2219b9eaeb398397bcf66348ac4bbe8a4f6e362537fff48"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--02b984d7-d279-4c88-853d-1b86210ad3e6",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--02b984d7-d279-4c88-853d-1b86210ad3e6"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--02b984d7-d279-4c88-853d-1b86210ad3e6",
|
|
"hashes": {
|
|
"SHA-256": "b24ed459bd007af4e54633e40c1b648fe801d19546c86a6f1a4295ee91481580"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--2595343d-d713-4091-8636-a9fb8be5754a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--2595343d-d713-4091-8636-a9fb8be5754a"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--2595343d-d713-4091-8636-a9fb8be5754a",
|
|
"hashes": {
|
|
"SHA-256": "773dc693ad65bbbe0852882060fb3bb7724cde70e44a15bbd78a419f055c331e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--b216591a-e853-4071-ab31-91d10b7767ec",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--b216591a-e853-4071-ab31-91d10b7767ec"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--b216591a-e853-4071-ab31-91d10b7767ec",
|
|
"hashes": {
|
|
"SHA-256": "bd79250be163cc4c9e1be892b130f8442a28b30109587dd5d64439cd30d15c63"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--87917b7e-58d1-4a96-881c-62b357867edb",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--87917b7e-58d1-4a96-881c-62b357867edb"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--87917b7e-58d1-4a96-881c-62b357867edb",
|
|
"hashes": {
|
|
"SHA-256": "80f0aa79c139d0746b5ce181305e72ada7429902b6dad38153bea05b6799aff8"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--4d06adaa-cc4c-4769-a187-3a4e7e1d9c84",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--4d06adaa-cc4c-4769-a187-3a4e7e1d9c84"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--4d06adaa-cc4c-4769-a187-3a4e7e1d9c84",
|
|
"hashes": {
|
|
"SHA-256": "a7a71e3d3a0a2e2beb1788799a988834a9835052f4f20b6ed9f42837d6356200"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--87ba44db-8fee-4a7f-bef6-2102262cdc41",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--87ba44db-8fee-4a7f-bef6-2102262cdc41"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--87ba44db-8fee-4a7f-bef6-2102262cdc41",
|
|
"hashes": {
|
|
"SHA-256": "fe2f1e24ebd4c0c2fab46f66a141a8659f1f67d092a6a3a48f44b65bde572ab2"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--43825e93-e602-4164-b63d-908ea6dc93a9",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--43825e93-e602-4164-b63d-908ea6dc93a9"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--43825e93-e602-4164-b63d-908ea6dc93a9",
|
|
"hashes": {
|
|
"SHA-256": "61d6aa4d530f6970cda9c5ce712c9aa3cba111641420ee858d1904cb85390a47"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--4166c5ef-6e02-4505-a033-c5e4679ae534",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--4166c5ef-6e02-4505-a033-c5e4679ae534"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--4166c5ef-6e02-4505-a033-c5e4679ae534",
|
|
"hashes": {
|
|
"SHA-256": "a0772b3cc2d27bd27a1c19bee7101c3a92eee837a3beb12d7fc95641bd906c14"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--9d65a086-e458-451f-803e-407ded03111b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--9d65a086-e458-451f-803e-407ded03111b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--9d65a086-e458-451f-803e-407ded03111b",
|
|
"hashes": {
|
|
"SHA-256": "3b96f712bdff4840006d2a2f481b77a61dadf18f99b79b41431029e009648b57"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--9bc82521-aa70-41e6-92dc-ce5fc272637e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--9bc82521-aa70-41e6-92dc-ce5fc272637e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--9bc82521-aa70-41e6-92dc-ce5fc272637e",
|
|
"hashes": {
|
|
"SHA-256": "fc31484929be85ea49c390c043f7eb938ca2d9d52c2c51f1a75eb7af7f5b5b8d"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--2bcd7ad7-1d2d-473c-8195-f2c38a7cae02",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--2bcd7ad7-1d2d-473c-8195-f2c38a7cae02"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--2bcd7ad7-1d2d-473c-8195-f2c38a7cae02",
|
|
"hashes": {
|
|
"SHA-256": "750b02c29bc9bdad4407f1dbc26f26b130e3066fd96d2bb0551ca73a4500d847"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--f122fde6-b6ea-41f0-9dcb-d1c1c68a722a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--f122fde6-b6ea-41f0-9dcb-d1c1c68a722a"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--f122fde6-b6ea-41f0-9dcb-d1c1c68a722a",
|
|
"hashes": {
|
|
"SHA-256": "f93bfdea9c654ed1b7bd7c6b8baeb73dcdf4a5b5f9c0f8d605cefd848ed2714f"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--fa86be3e-1ff1-400f-ada4-5c966517529b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--fa86be3e-1ff1-400f-ada4-5c966517529b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--fa86be3e-1ff1-400f-ada4-5c966517529b",
|
|
"hashes": {
|
|
"SHA-256": "aa6a90f7584ff553aa1f3f4d822ff1e0bdafc99ee6dc26eb29f22c771ae38ced"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--25b14ef8-2af4-4b53-b1b3-0085aa53881c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--25b14ef8-2af4-4b53-b1b3-0085aa53881c"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--25b14ef8-2af4-4b53-b1b3-0085aa53881c",
|
|
"hashes": {
|
|
"SHA-256": "141f6941dd7a9e199567e3ea44a07185cc45bf3508ebcf7c20d0fac04f5165dd"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1891f4df-1720-4d9d-8f9d-a28b95c998d2",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1891f4df-1720-4d9d-8f9d-a28b95c998d2"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1891f4df-1720-4d9d-8f9d-a28b95c998d2",
|
|
"hashes": {
|
|
"SHA-256": "2ee83822e90bf9077a0060a2cdf184329a0d7463077881fbe9e534ac0c5aeafa"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--482d7a88-a48c-4fea-bb20-39ba94801481",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--482d7a88-a48c-4fea-bb20-39ba94801481"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--482d7a88-a48c-4fea-bb20-39ba94801481",
|
|
"hashes": {
|
|
"SHA-256": "d6b3c860787fa02452abab2ae6b158b50c99c543a7a518738938ed1132a4c05f"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a16f78cc-faad-4d1a-9b36-4f35f0dd17d1",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a16f78cc-faad-4d1a-9b36-4f35f0dd17d1"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a16f78cc-faad-4d1a-9b36-4f35f0dd17d1",
|
|
"hashes": {
|
|
"SHA-256": "db8bf49cad8a72f5077c03e794d180cd803fe3fa612f038f336f75368a55bdbf"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--eb8e10be-a898-491d-bec5-f0175549c503",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--eb8e10be-a898-491d-bec5-f0175549c503"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--eb8e10be-a898-491d-bec5-f0175549c503",
|
|
"hashes": {
|
|
"SHA-256": "9d46a3ee045fab910e0195a894717563df6b1f7490607175c867a958fd52a9cf"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--58b27aa9-1f7a-423b-9881-31eae626777c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--58b27aa9-1f7a-423b-9881-31eae626777c"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--58b27aa9-1f7a-423b-9881-31eae626777c",
|
|
"hashes": {
|
|
"SHA-256": "e9b73413756d5e5be1d9a86999ebf4b6ece681572849545c8a66c43df07aa614"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1ffa57b1-5039-4b8e-a786-544384b07cd3",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1ffa57b1-5039-4b8e-a786-544384b07cd3"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1ffa57b1-5039-4b8e-a786-544384b07cd3",
|
|
"hashes": {
|
|
"SHA-256": "cde11975c9715bfa0f0bfb192f920b04e637fc1a417e52a4a8ef650c367b9f5d"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--02e43f70-f7c7-4c94-9c03-df37379fa33f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--02e43f70-f7c7-4c94-9c03-df37379fa33f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--02e43f70-f7c7-4c94-9c03-df37379fa33f",
|
|
"hashes": {
|
|
"SHA-256": "57bf128dd42cbcebac753c89ead426c684b3f524272bad0fedb50d206c9779bc"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--3179fa83-d80a-4256-94e0-2595d956a0c5",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--3179fa83-d80a-4256-94e0-2595d956a0c5"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--3179fa83-d80a-4256-94e0-2595d956a0c5",
|
|
"hashes": {
|
|
"SHA-256": "6527da30f4a6c1fdfc7e9a2a81b9ffb3f07bbfcc060d77df6d1c3ea62760ff5a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--0816347e-76a0-4593-9182-f18b63f130a8",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--0816347e-76a0-4593-9182-f18b63f130a8"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--0816347e-76a0-4593-9182-f18b63f130a8",
|
|
"hashes": {
|
|
"SHA-256": "c30ce4044201ba3ef1173a3a64eba35eb7524f0635b59d5169099f94e3219c45"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--ace84319-5096-4dcb-a8a7-ae582d8274c0",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--ace84319-5096-4dcb-a8a7-ae582d8274c0"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--ace84319-5096-4dcb-a8a7-ae582d8274c0",
|
|
"hashes": {
|
|
"SHA-256": "a034749109dbb495c99787a7243321994eb6a5816d8822e8ff7fd9fe333b6433"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--80fe7685-75f7-405d-ba94-7a57b16b1045",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:39.000Z",
|
|
"modified": "2021-03-31T15:31:39.000Z",
|
|
"first_observed": "2021-03-31T15:31:39Z",
|
|
"last_observed": "2021-03-31T15:31:39Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--80fe7685-75f7-405d-ba94-7a57b16b1045"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--80fe7685-75f7-405d-ba94-7a57b16b1045",
|
|
"hashes": {
|
|
"SHA-256": "a71868b3cf2cddb53977ba095b90685f900043ff64c804cb406a0c6a42fc88ed"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--d2c83a75-3ff2-41d6-884c-e4c85f213987",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--d2c83a75-3ff2-41d6-884c-e4c85f213987"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--d2c83a75-3ff2-41d6-884c-e4c85f213987",
|
|
"hashes": {
|
|
"SHA-256": "0094eabd4e5fab823f11004e0c639da777467f29218d76685c6f43dff2c8a60c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--98689855-44ca-4593-a566-f8a915499071",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--98689855-44ca-4593-a566-f8a915499071"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--98689855-44ca-4593-a566-f8a915499071",
|
|
"hashes": {
|
|
"SHA-256": "fd36d0a92be3751431ce5b6d866d883de0632596af4b2dc0a6d0d403d3782da9"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--89150848-1e6d-49b1-be6a-479ba403d202",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--89150848-1e6d-49b1-be6a-479ba403d202"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--89150848-1e6d-49b1-be6a-479ba403d202",
|
|
"hashes": {
|
|
"SHA-256": "9b402811635664887ded1274ee27245b573a4a5adfadcfc575514f311c2d62b1"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--ffa23f9d-1d27-4a87-8a4c-72dda230d902",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--ffa23f9d-1d27-4a87-8a4c-72dda230d902"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--ffa23f9d-1d27-4a87-8a4c-72dda230d902",
|
|
"hashes": {
|
|
"SHA-256": "aa52c6bb2a28f615c7882c97c3b5e8a5ae12cdd5faf2f279fe6ae7c4c56c40d6"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--c19bf317-85ea-41c7-8156-7d8888b0def5",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--c19bf317-85ea-41c7-8156-7d8888b0def5"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--c19bf317-85ea-41c7-8156-7d8888b0def5",
|
|
"hashes": {
|
|
"SHA-256": "326acb77b32a1f00e28bdaec32e023b0745e7e70359488e0626609dc61739601"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--56074d03-b956-4d85-8b60-ef032b09532c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--56074d03-b956-4d85-8b60-ef032b09532c"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--56074d03-b956-4d85-8b60-ef032b09532c",
|
|
"hashes": {
|
|
"SHA-256": "48f75a3b10d0c49a34ac0dab32e107d403d2d8d7020bc65f6cc70af514865d74"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e3c5b20b-8fb2-4e08-b333-538916793cad",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e3c5b20b-8fb2-4e08-b333-538916793cad"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e3c5b20b-8fb2-4e08-b333-538916793cad",
|
|
"hashes": {
|
|
"SHA-256": "96b8a0a46eed5cffcbd12f1d017dc9353e9609ea63bd2a6842fb6caaa14e75f9"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--926e5ce0-f5fb-4c35-82f6-d6d1c30f02cf",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--926e5ce0-f5fb-4c35-82f6-d6d1c30f02cf"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--926e5ce0-f5fb-4c35-82f6-d6d1c30f02cf",
|
|
"hashes": {
|
|
"SHA-256": "ba975c7ae2822b5fe2c3a3f57632dc419d5880ce9876e9ada1ab45f1f8111327"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--5f82357c-000a-4bc5-9000-e9ba1546d737",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--5f82357c-000a-4bc5-9000-e9ba1546d737"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--5f82357c-000a-4bc5-9000-e9ba1546d737",
|
|
"hashes": {
|
|
"SHA-256": "5b1a641537a96c93eae51e311fdbe2ec0c70f71b6d597e994e3eb491e58e216c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--bf9c24c8-8fd3-4dec-ac34-cbc18299fad9",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--bf9c24c8-8fd3-4dec-ac34-cbc18299fad9"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--bf9c24c8-8fd3-4dec-ac34-cbc18299fad9",
|
|
"hashes": {
|
|
"SHA-256": "9fa4f4fa0ccd9006be413b20a0352788f9c1adca9692e80c446bf7195038cfce"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1bb63928-59af-4273-bf20-85e802d0504a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1bb63928-59af-4273-bf20-85e802d0504a"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1bb63928-59af-4273-bf20-85e802d0504a",
|
|
"hashes": {
|
|
"SHA-256": "3531df9b9279335d25703f75ab3172e84551a15162aac06054ae1aa414b01d7b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1be05608-873a-4b4b-af77-8e1ac46020f5",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1be05608-873a-4b4b-af77-8e1ac46020f5"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1be05608-873a-4b4b-af77-8e1ac46020f5",
|
|
"hashes": {
|
|
"SHA-256": "71f7faa069b2823432ac004f2347557ebb4a9212ce8dac5ec90736c66999c34e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--3b538af6-43a4-4c7e-97fb-c44c5d226509",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--3b538af6-43a4-4c7e-97fb-c44c5d226509"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--3b538af6-43a4-4c7e-97fb-c44c5d226509",
|
|
"hashes": {
|
|
"SHA-256": "ddc70fe84c40545b60c791844192c3c253d8c70c4960526ede8eef4d5ed77d36"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--41f55705-5612-4888-adf6-0beb04295ee4",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--41f55705-5612-4888-adf6-0beb04295ee4"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--41f55705-5612-4888-adf6-0beb04295ee4",
|
|
"hashes": {
|
|
"SHA-256": "4d0a21bbe4d9aa6c9ec28c32d3fdbe51a52323f05ff25b39f16776945e070b68"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--68d803fe-3754-4d9d-a47e-e2f2bd0c2119",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--68d803fe-3754-4d9d-a47e-e2f2bd0c2119"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--68d803fe-3754-4d9d-a47e-e2f2bd0c2119",
|
|
"hashes": {
|
|
"SHA-256": "11740541565857b4e7f70560b5ae3983cfb13c871bd5cbcb4e326d8da1bdc5c6"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--d8dcbad9-716e-4f8c-a032-c0ec997b313e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--d8dcbad9-716e-4f8c-a032-c0ec997b313e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--d8dcbad9-716e-4f8c-a032-c0ec997b313e",
|
|
"hashes": {
|
|
"SHA-256": "3b44112a6fe65dfe852b09b0e2db595f3d42787ebead184ddeef22027ad634d0"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--f10c1500-e850-4f53-bf5f-4a8b923cfa05",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--f10c1500-e850-4f53-bf5f-4a8b923cfa05"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--f10c1500-e850-4f53-bf5f-4a8b923cfa05",
|
|
"hashes": {
|
|
"SHA-256": "35892e97a064feac4188b1c280e2cbc64d210f8e05beec4c3e306fee339b982f"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--91437f5c-636a-4433-a7f2-6d7672787f13",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--91437f5c-636a-4433-a7f2-6d7672787f13"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--91437f5c-636a-4433-a7f2-6d7672787f13",
|
|
"hashes": {
|
|
"SHA-256": "ee3a1ff5c23e29359b76bf69158dd9a0b084a7fc917da78d6fdab735d895ec91"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--605accde-6f3c-4394-8676-cf9534d45236",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--605accde-6f3c-4394-8676-cf9534d45236"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--605accde-6f3c-4394-8676-cf9534d45236",
|
|
"hashes": {
|
|
"SHA-256": "afadbb3713763aea2ce6e694df12608ce8b030dd484b24b571dcad7d7f35381c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a4b05641-a6f6-4b4a-befb-ab3e7cada1cc",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a4b05641-a6f6-4b4a-befb-ab3e7cada1cc"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a4b05641-a6f6-4b4a-befb-ab3e7cada1cc",
|
|
"hashes": {
|
|
"SHA-256": "1d6d59e43e78210113840131b86cc800291b84bdca09a317955b744db892ad8d"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--0570592b-859d-45c8-87de-b30f7aa3c2d3",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--0570592b-859d-45c8-87de-b30f7aa3c2d3"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--0570592b-859d-45c8-87de-b30f7aa3c2d3",
|
|
"hashes": {
|
|
"SHA-256": "3904a5f52707e41385bf7ca2d989585673c8644951bfa6ad7465a3e2aecd7262"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--d22963f7-f0c2-40c9-9487-f1686dd6240f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--d22963f7-f0c2-40c9-9487-f1686dd6240f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--d22963f7-f0c2-40c9-9487-f1686dd6240f",
|
|
"hashes": {
|
|
"SHA-256": "862b3849f8aa783b26340dd0979070e412e9f4d18ebb70116ef3032ba59adbb9"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e8df1240-c259-49b5-b427-9ab66cd22fec",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e8df1240-c259-49b5-b427-9ab66cd22fec"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e8df1240-c259-49b5-b427-9ab66cd22fec",
|
|
"hashes": {
|
|
"SHA-256": "4b7453fc3049f5c5917e5a3c8855e294290a94117b5c7f9b1202acb814bf721c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--16d17630-0652-4f85-a8d8-daa9180fb9af",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--16d17630-0652-4f85-a8d8-daa9180fb9af"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--16d17630-0652-4f85-a8d8-daa9180fb9af",
|
|
"hashes": {
|
|
"SHA-256": "1be3fb470a45b3b2d0e62f9aed1deb11b1be7ec4dd9d66fc6e90406aa2c709ab"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--eb62a731-93fe-4259-926e-d831d54626da",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--eb62a731-93fe-4259-926e-d831d54626da"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--eb62a731-93fe-4259-926e-d831d54626da",
|
|
"hashes": {
|
|
"SHA-256": "b129ed8e6d7e6fe3d18e2c041dd18a2565e162b1c568603e6f3ddb984a476e42"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--faaafeb9-3c87-486c-9052-08d647cbb12e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--faaafeb9-3c87-486c-9052-08d647cbb12e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--faaafeb9-3c87-486c-9052-08d647cbb12e",
|
|
"hashes": {
|
|
"SHA-256": "a3edc482bf428a1234f841ffc2812f65ccd76afa56c1423a4e9561f90a2ed52c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--dbb53c4a-400e-49a3-8502-2590ada99681",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--dbb53c4a-400e-49a3-8502-2590ada99681"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--dbb53c4a-400e-49a3-8502-2590ada99681",
|
|
"hashes": {
|
|
"SHA-256": "f6aa73bf17a967c169c1cc128487d5236dae4baa45a8598ede1b1d20e9a05305"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--31904794-5094-4453-b505-baad4fff8798",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--31904794-5094-4453-b505-baad4fff8798"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--31904794-5094-4453-b505-baad4fff8798",
|
|
"hashes": {
|
|
"SHA-256": "451724eb6b379025fd49e7d683aa3747ead9ea1ede8eb0b0369311d24ee266e4"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--b05989a0-5121-4f74-9593-c4c63743f5e7",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--b05989a0-5121-4f74-9593-c4c63743f5e7"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--b05989a0-5121-4f74-9593-c4c63743f5e7",
|
|
"hashes": {
|
|
"SHA-256": "05ab5972c0a4b1ce912c9137e4d849b7bc5166ecc753078aaf7c82565b22af23"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--2ed64483-cd27-4662-9e13-2fda1de8e135",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--2ed64483-cd27-4662-9e13-2fda1de8e135"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--2ed64483-cd27-4662-9e13-2fda1de8e135",
|
|
"hashes": {
|
|
"SHA-256": "56c57baca73420db6665cd88dd49ec55aa5101e9e2866040a6b86913629ba859"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--c5715f1a-9102-44e1-ad9c-194d52537c28",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--c5715f1a-9102-44e1-ad9c-194d52537c28"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--c5715f1a-9102-44e1-ad9c-194d52537c28",
|
|
"hashes": {
|
|
"SHA-256": "6f7b7e6a8fc6e66cedd8667e30e71f3e000d951f4e65c7bd929dbef3042abd5a"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--495a756c-bdd1-439e-8080-22fca4dd2702",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--495a756c-bdd1-439e-8080-22fca4dd2702"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--495a756c-bdd1-439e-8080-22fca4dd2702",
|
|
"hashes": {
|
|
"SHA-256": "91e032a087db1b4718365b458f0cd0aaaeeb6852d281f64bbfc3dff02896774b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--13c2430c-f314-45a0-94a1-b7e94348eab0",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--13c2430c-f314-45a0-94a1-b7e94348eab0"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--13c2430c-f314-45a0-94a1-b7e94348eab0",
|
|
"hashes": {
|
|
"SHA-256": "b129362de7ac7eff2300a8bfc998c034644da285748b3ebc6293545b0e1bc409"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--c2ad2225-185e-4eff-a4da-1f0d6b573393",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--c2ad2225-185e-4eff-a4da-1f0d6b573393"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--c2ad2225-185e-4eff-a4da-1f0d6b573393",
|
|
"hashes": {
|
|
"SHA-256": "3696a4eae0c1af42ba024b2ecf6c688311d89539dcbd62de09ed4cd2cbc9e06c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--4f83ee27-92c5-457d-b99e-99b33c858d5a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--4f83ee27-92c5-457d-b99e-99b33c858d5a"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--4f83ee27-92c5-457d-b99e-99b33c858d5a",
|
|
"hashes": {
|
|
"SHA-256": "6a1d03f6ed62f7c90305487e24911056f3cd3bcb7c9b4f2529f6e9f05e960681"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--870244d6-6dd1-436b-8cda-3f7c17b8d3cb",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--870244d6-6dd1-436b-8cda-3f7c17b8d3cb"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--870244d6-6dd1-436b-8cda-3f7c17b8d3cb",
|
|
"hashes": {
|
|
"SHA-256": "fb94dd1cf674c7200be979175c0c466980a267c9d3c0efc00e45d703bd61679c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--47faeb13-fca3-46c2-a4e8-af14fe937fbb",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--47faeb13-fca3-46c2-a4e8-af14fe937fbb"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--47faeb13-fca3-46c2-a4e8-af14fe937fbb",
|
|
"hashes": {
|
|
"SHA-256": "a56d74da16cf15d798c280f8828d1ec228416f77949b8fa3a2ab57be105bdfac"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--a13d5213-3ea3-4d2a-9459-ef9ddfc950c1",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--a13d5213-3ea3-4d2a-9459-ef9ddfc950c1"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--a13d5213-3ea3-4d2a-9459-ef9ddfc950c1",
|
|
"hashes": {
|
|
"SHA-256": "a0dd3434b8d4409f20b38f4b4d8c5ae940345a6262677549a32a4dc142d6c03b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--d522b229-00e4-49e8-999f-ae1a8fd5eda8",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--d522b229-00e4-49e8-999f-ae1a8fd5eda8"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--d522b229-00e4-49e8-999f-ae1a8fd5eda8",
|
|
"hashes": {
|
|
"SHA-256": "0adf78a70a3442348a70224cb9c3ad1f9a2df08b4d0c7567c7f3c6b269e4117d"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--5e32758c-559e-4ec7-b38c-c1fcee31d0d6",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--5e32758c-559e-4ec7-b38c-c1fcee31d0d6"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--5e32758c-559e-4ec7-b38c-c1fcee31d0d6",
|
|
"hashes": {
|
|
"SHA-256": "4028159aab4d2f048ccf177ba816e68161f2d436d042306e4640950d03d6f837"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1fc7ddd4-3857-4125-b94e-50d734c0a2d6",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1fc7ddd4-3857-4125-b94e-50d734c0a2d6"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1fc7ddd4-3857-4125-b94e-50d734c0a2d6",
|
|
"hashes": {
|
|
"SHA-256": "32139088da2b2c8b10393292a5789449a2a0721d0090665d5a0e676385e901a1"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--6a7cc301-3cd4-499a-b708-bf4283394c6b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--6a7cc301-3cd4-499a-b708-bf4283394c6b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--6a7cc301-3cd4-499a-b708-bf4283394c6b",
|
|
"hashes": {
|
|
"SHA-256": "746da1f97c0a4265d0457adda3a5ef27b54853e1ea24ed11b1da23fa3bb23f27"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--eb7724fd-2987-467c-9ac8-f3550e48b3f4",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--eb7724fd-2987-467c-9ac8-f3550e48b3f4"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--eb7724fd-2987-467c-9ac8-f3550e48b3f4",
|
|
"hashes": {
|
|
"SHA-256": "c8fa54e1c06ad6c20fd04b08425c94fd133757953ef0d6fd322630c4a4e72cfb"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--2ea679a4-795a-42f6-a3a4-73dd56faf438",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--2ea679a4-795a-42f6-a3a4-73dd56faf438"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--2ea679a4-795a-42f6-a3a4-73dd56faf438",
|
|
"hashes": {
|
|
"SHA-256": "6aa9b90084a9c5d1d2b52b92fe9f40175fd1adfb9555cf2130417e0a78999d48"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--e938e355-037a-4206-9e56-f845092404f0",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--e938e355-037a-4206-9e56-f845092404f0"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--e938e355-037a-4206-9e56-f845092404f0",
|
|
"hashes": {
|
|
"SHA-256": "e9b991c65b0b60d2ad9ed0b267e1f7170b1d32acfa2311ed216a247fa26fc822"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--545466d7-b31a-4d23-add4-137bfc9c9658",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--545466d7-b31a-4d23-add4-137bfc9c9658"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--545466d7-b31a-4d23-add4-137bfc9c9658",
|
|
"hashes": {
|
|
"SHA-256": "667dcb0b6de5e52880e5ec219b9731ebef289d9233d94b7806bd5127beaf0c22"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--7ef585a5-a71d-4645-a55f-50a845ac1acc",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--7ef585a5-a71d-4645-a55f-50a845ac1acc"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--7ef585a5-a71d-4645-a55f-50a845ac1acc",
|
|
"hashes": {
|
|
"SHA-256": "5b273bb88e59d628b9de823dd93a3df51f7c5ad1b06df905463abf74ba8aa756"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--31fac661-7e6d-4c11-a3e2-58765e2032ff",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--31fac661-7e6d-4c11-a3e2-58765e2032ff"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--31fac661-7e6d-4c11-a3e2-58765e2032ff",
|
|
"hashes": {
|
|
"SHA-256": "bee585e7af295dd5b6f2b6578088369457e7a22219ab8c8c81cbf3eb654ee7b4"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--f4db02d4-a228-4d67-9f0e-76d1bf33fee9",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--f4db02d4-a228-4d67-9f0e-76d1bf33fee9"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--f4db02d4-a228-4d67-9f0e-76d1bf33fee9",
|
|
"hashes": {
|
|
"SHA-256": "bbb8b34d64c475178311dd81e16510b984a989021412a89ac1f12bea9f075066"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--69204b13-2887-4dd3-b335-61e077a0bfd7",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--69204b13-2887-4dd3-b335-61e077a0bfd7"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--69204b13-2887-4dd3-b335-61e077a0bfd7",
|
|
"hashes": {
|
|
"SHA-256": "7ae0c90f469d1eba3bb7f3ff971882a42a030b5f17ae6041499a98f1b14a5020"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--5a10ff42-8703-4b13-9393-ad7f543fb71e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--5a10ff42-8703-4b13-9393-ad7f543fb71e"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--5a10ff42-8703-4b13-9393-ad7f543fb71e",
|
|
"hashes": {
|
|
"SHA-256": "19524722fe6fd437656c1a2b1212c293c57347725402ff425593b32de91bfac4"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--116fb4e3-0a63-4ddd-8f0b-cef195bde243",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--116fb4e3-0a63-4ddd-8f0b-cef195bde243"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--116fb4e3-0a63-4ddd-8f0b-cef195bde243",
|
|
"hashes": {
|
|
"SHA-256": "6545e89baadf5dd96b70e0f3f5dee9a29c47cd0ba1cca22b06fa488493da0472"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--8681a774-6a9a-4e49-8f1b-bde1f16fe283",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--8681a774-6a9a-4e49-8f1b-bde1f16fe283"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--8681a774-6a9a-4e49-8f1b-bde1f16fe283",
|
|
"hashes": {
|
|
"SHA-256": "5eb034edafc1e81f0ab353c89e6643a209ad1fea9eb68333cbf1ee94eaa942ce"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--9b49832f-ed65-4f75-9bf6-9854b450980b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--9b49832f-ed65-4f75-9bf6-9854b450980b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--9b49832f-ed65-4f75-9bf6-9854b450980b",
|
|
"hashes": {
|
|
"SHA-256": "cf4ef7b731f8ed00fe63775440145314ffa93e720693a533b7206f29fb43eb08"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--efaa2ba8-ef43-44f6-aab1-411981473566",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--efaa2ba8-ef43-44f6-aab1-411981473566"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--efaa2ba8-ef43-44f6-aab1-411981473566",
|
|
"hashes": {
|
|
"SHA-256": "4440dab42b0d92c3d3322f5c9366661ba0ffb8c2a8ee59df0a226f44d1abf182"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--ca840037-a827-4bb3-bedd-74124505c61a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--ca840037-a827-4bb3-bedd-74124505c61a"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--ca840037-a827-4bb3-bedd-74124505c61a",
|
|
"hashes": {
|
|
"SHA-256": "afaa7ec44de3bad769383c31b7d8ff1202c7d9db5a063bfbcce48869690b72da"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--61999fa9-c72b-49fb-89cf-e866ce16a71f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--61999fa9-c72b-49fb-89cf-e866ce16a71f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--61999fa9-c72b-49fb-89cf-e866ce16a71f",
|
|
"hashes": {
|
|
"SHA-256": "aaf1c64a5ecc7cbd560c1e98c3225b1cb9d05f23945ed1cce7fec48e4910421b"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--c883c588-bacb-4830-a612-30d0a2b8c0d0",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--c883c588-bacb-4830-a612-30d0a2b8c0d0"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--c883c588-bacb-4830-a612-30d0a2b8c0d0",
|
|
"hashes": {
|
|
"SHA-256": "83b34647edb04b335bfc66e2a930d60e36665870b568c30724a2ca32e400db4c"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--537ed7c3-6970-4941-892d-e73bb3b16dba",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--537ed7c3-6970-4941-892d-e73bb3b16dba"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--537ed7c3-6970-4941-892d-e73bb3b16dba",
|
|
"hashes": {
|
|
"SHA-256": "bb23ecf3e72cff788ff83e5a5c0fb37349e8f15ae53eac2c99b9c6da70a6edc2"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--f6416255-b0a3-41a6-9ea9-cd53318ce1da",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--f6416255-b0a3-41a6-9ea9-cd53318ce1da"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--f6416255-b0a3-41a6-9ea9-cd53318ce1da",
|
|
"hashes": {
|
|
"SHA-256": "9a6f0880ed01c2f3ac123cb44c588515674c7de39d54b887ebc4d295851f5be1"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--f2ec5555-bd86-4859-ba84-7bd0185ce422",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--f2ec5555-bd86-4859-ba84-7bd0185ce422"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--f2ec5555-bd86-4859-ba84-7bd0185ce422",
|
|
"hashes": {
|
|
"SHA-256": "50cb84ce79cb5b2de946a69987298e6ceb0b133f5f70943cfb8b165659133d2e"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--1551a658-75c4-43ff-8579-ac8f7c930670",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--1551a658-75c4-43ff-8579-ac8f7c930670"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--1551a658-75c4-43ff-8579-ac8f7c930670",
|
|
"hashes": {
|
|
"SHA-256": "cb85ce68d1b644a162108d0d1e5679a2ba3b0ed4da0720a984c9c1b2be756bff"
|
|
}
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--63ed8fcf-c22f-4109-8625-b4d8cb868db0",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:31:40.000Z",
|
|
"modified": "2021-03-31T15:31:40.000Z",
|
|
"first_observed": "2021-03-31T15:31:40Z",
|
|
"last_observed": "2021-03-31T15:31:40Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"file--63ed8fcf-c22f-4109-8625-b4d8cb868db0"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "file",
|
|
"spec_version": "2.1",
|
|
"id": "file--63ed8fcf-c22f-4109-8625-b4d8cb868db0",
|
|
"hashes": {
|
|
"SHA-256": "2067f3ac3d7775036c36551ff911a7e2653fc7cf152f3dd27cc9c129db8f56d4"
|
|
}
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--b5f33c2f-a945-4f0b-abac-7978e14a936c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:19:15.000Z",
|
|
"modified": "2021-03-31T15:19:15.000Z",
|
|
"labels": [
|
|
"misp:name=\"report\"",
|
|
"misp:meta-category=\"misc\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "link",
|
|
"object_relation": "link",
|
|
"value": "https://blog.talosintelligence.com/2021/03/cheating-cheater-how-adversaries-are.html",
|
|
"category": "External analysis",
|
|
"uuid": "eef431eb-33e5-4b22-bff9-4e9c0f35538e"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "summary",
|
|
"value": "The cryptor in this campaign uses several obfuscation techniques that makes it difficult to dissect, and could pose a challenge for security analysts not familiar with Visual Basic 6. Our analysis provides insight into the adversaries' tactics and how the crypter works in detail. These types of attacks are a return to form for classic virus campaigns \u2014 video game players are no strangers to trying to avoid malicious downloads while trying to change the game they're playing.",
|
|
"category": "Other",
|
|
"uuid": "6c5abd65-179a-42f1-b814-23abdfd80aa9"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "misc",
|
|
"x_misp_name": "report"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--f3c71db5-5bae-4c49-b80c-117bf59b48c7",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:24:29.000Z",
|
|
"modified": "2021-03-31T15:24:29.000Z",
|
|
"labels": [
|
|
"misp:name=\"passive-dns\"",
|
|
"misp:meta-category=\"network\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rdata",
|
|
"value": "179.253.227.97",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: dracula4000.duckdns.org",
|
|
"uuid": "3be0b25c-591d-46e9-b28a-7a43855786e5"
|
|
},
|
|
{
|
|
"type": "counter",
|
|
"object_relation": "count",
|
|
"value": "4",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: dracula4000.duckdns.org",
|
|
"uuid": "3b128d9d-318c-4ddd-b077-0de26d3f0a41"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_first",
|
|
"value": "2021-01-24T08:15:11+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: dracula4000.duckdns.org",
|
|
"uuid": "a472d70a-9350-4854-a013-2bdf6bb9ad64"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_last",
|
|
"value": "2021-01-24T13:32:54+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: dracula4000.duckdns.org",
|
|
"uuid": "75899002-c496-4fac-9713-53278f64b5d2"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrname",
|
|
"value": "dracula4000.duckdns.org.",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: dracula4000.duckdns.org",
|
|
"uuid": "8d63b536-d1df-4192-8f25-d2b421563f2d"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrtype",
|
|
"value": "A",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: dracula4000.duckdns.org",
|
|
"uuid": "6d43a73b-d1b9-4afd-b522-06223678be6b"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "bailiwick",
|
|
"value": "duckdns.org.",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: dracula4000.duckdns.org",
|
|
"uuid": "6648d164-cbcc-469e-a6b9-67ea717e389a"
|
|
}
|
|
],
|
|
"x_misp_comment": "dracula4000.duckdns.org: enriched via the farsight_passivedns module.",
|
|
"x_misp_meta_category": "network",
|
|
"x_misp_name": "passive-dns"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--bc480554-61ad-4e7f-944a-f0747675544d",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:24:31.000Z",
|
|
"modified": "2021-03-31T15:24:31.000Z",
|
|
"labels": [
|
|
"misp:name=\"passive-dns\"",
|
|
"misp:meta-category=\"network\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rdata",
|
|
"value": "141.255.147.117",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "a7c7b0b1-3471-454c-aa7d-ef652bcbebc1"
|
|
},
|
|
{
|
|
"type": "counter",
|
|
"object_relation": "count",
|
|
"value": "2",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "a444f785-3679-4495-a8db-1b7ea461b424"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_first",
|
|
"value": "2017-04-25T10:38:06+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "5fd41fc0-22eb-47b6-a7f5-b3509a5ea486"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_last",
|
|
"value": "2017-04-25T10:38:06+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "0bed9ad0-2962-436f-8910-a0d10e0c35cd"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrname",
|
|
"value": "draculax.myq-see.com.",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "b82c5abd-e86d-4182-844c-81e6dd527c59"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrtype",
|
|
"value": "A",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "99cdb1de-376d-4b2e-aafd-7c1c70e9d9e7"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "bailiwick",
|
|
"value": "myq-see.com.",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "1e530e63-06f9-400c-bb3d-ebc98c519195"
|
|
}
|
|
],
|
|
"x_misp_comment": "draculax.myq-see.com: enriched via the farsight_passivedns module.",
|
|
"x_misp_meta_category": "network",
|
|
"x_misp_name": "passive-dns"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--19a1a277-66a9-43b3-916a-b3eab35ad817",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:24:31.000Z",
|
|
"modified": "2021-03-31T15:24:31.000Z",
|
|
"labels": [
|
|
"misp:name=\"passive-dns\"",
|
|
"misp:meta-category=\"network\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rdata",
|
|
"value": "141.255.159.82",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "ea694b8a-e2dd-4de3-9ea0-fadb81e4fff2"
|
|
},
|
|
{
|
|
"type": "counter",
|
|
"object_relation": "count",
|
|
"value": "2",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "604ea7bb-fada-46b4-be4c-116b3dfde58c"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_first",
|
|
"value": "2017-04-11T22:13:14+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "b6963ea9-3b63-4fa5-aed2-76e511f02477"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_last",
|
|
"value": "2017-04-11T22:13:14+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "9df553ff-ec64-431a-a2e0-c7707c7ecc6f"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrname",
|
|
"value": "draculax.myq-see.com.",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "a33f7b65-2e5a-490a-964b-006b6dbfc55a"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrtype",
|
|
"value": "A",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "eca0a96e-6e0a-43c7-8ef4-c21361b59fe9"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "bailiwick",
|
|
"value": "myq-see.com.",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "a2b08858-8f54-482c-bcb5-73704ffeb982"
|
|
}
|
|
],
|
|
"x_misp_comment": "draculax.myq-see.com: enriched via the farsight_passivedns module.",
|
|
"x_misp_meta_category": "network",
|
|
"x_misp_name": "passive-dns"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--c01928cb-f8eb-4b4d-a29c-6e4c268ff7ab",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:24:31.000Z",
|
|
"modified": "2021-03-31T15:24:31.000Z",
|
|
"labels": [
|
|
"misp:name=\"passive-dns\"",
|
|
"misp:meta-category=\"network\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rdata",
|
|
"value": "168.181.48.248",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "dd2c988d-be54-49c3-848b-5c413d3d8414"
|
|
},
|
|
{
|
|
"type": "counter",
|
|
"object_relation": "count",
|
|
"value": "3",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "7517b90f-ff00-4014-a364-e534fbbf2aff"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_first",
|
|
"value": "2017-04-14T20:25:10+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "73b413cc-72c5-4dcb-90e5-56ba90b95837"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_last",
|
|
"value": "2017-04-14T20:26:22+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "1c4bb244-514c-49c7-b581-db0d6a2d9f61"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrname",
|
|
"value": "draculax.myq-see.com.",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "cfe20a1f-2bb4-46db-93a0-7e186a60e5eb"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrtype",
|
|
"value": "A",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "88cb39fa-a0a8-49db-a472-dad9bfb7dd9c"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "bailiwick",
|
|
"value": "myq-see.com.",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "56d3df5b-843b-4e43-8ecc-011477945fd7"
|
|
}
|
|
],
|
|
"x_misp_comment": "draculax.myq-see.com: enriched via the farsight_passivedns module.",
|
|
"x_misp_meta_category": "network",
|
|
"x_misp_name": "passive-dns"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--e0403542-75ba-4f21-b811-68f28e75edae",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:24:31.000Z",
|
|
"modified": "2021-03-31T15:24:31.000Z",
|
|
"labels": [
|
|
"misp:name=\"passive-dns\"",
|
|
"misp:meta-category=\"network\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rdata",
|
|
"value": "168.181.51.45",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "a360e054-8d5e-4c44-903a-c69ba61053e1"
|
|
},
|
|
{
|
|
"type": "counter",
|
|
"object_relation": "count",
|
|
"value": "5",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "1a95b08b-e727-400f-85d3-9891d5bfe6d4"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_first",
|
|
"value": "2017-04-18T01:03:26+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "d853b209-c829-4abf-a1e1-5408c2607d0a"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_last",
|
|
"value": "2017-04-18T01:13:42+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "2f665138-1bc7-413c-bd5a-99e829207014"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrname",
|
|
"value": "draculax.myq-see.com.",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "891d6246-1da1-41a9-b22b-9d6b4b5e8ad7"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrtype",
|
|
"value": "A",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "71847df9-e6bc-4347-adc2-9fb749af5987"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "bailiwick",
|
|
"value": "myq-see.com.",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "d1f047f5-7091-4e3c-ac99-b7c8ee3270ec"
|
|
}
|
|
],
|
|
"x_misp_comment": "draculax.myq-see.com: enriched via the farsight_passivedns module.",
|
|
"x_misp_meta_category": "network",
|
|
"x_misp_name": "passive-dns"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--c89a5c0f-e2a4-42b9-a14d-a4e7b72c7ad2",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:24:31.000Z",
|
|
"modified": "2021-03-31T15:24:31.000Z",
|
|
"labels": [
|
|
"misp:name=\"passive-dns\"",
|
|
"misp:meta-category=\"network\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rdata",
|
|
"value": "200.101.151.150",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "e549d10a-d7e7-4e64-b6a8-041fb46c425d"
|
|
},
|
|
{
|
|
"type": "counter",
|
|
"object_relation": "count",
|
|
"value": "1",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "6b454e61-5b62-4c7d-99b9-ea09d2638984"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_first",
|
|
"value": "2021-03-30T16:00:14+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "154d4679-313f-4da7-ac1b-f4110183cfaf"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_last",
|
|
"value": "2021-03-30T16:00:14+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "ba749abc-efb7-4c93-84de-3f1681437230"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrname",
|
|
"value": "draculax.myq-see.com.",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "865f7117-1a5d-4a7b-a7d8-8438978a1203"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrtype",
|
|
"value": "A",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "6e505efe-7cf3-4ab7-9a18-8bd5a737384a"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "bailiwick",
|
|
"value": "myq-see.com.",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: draculax.myq-see.com",
|
|
"uuid": "8d0925ff-b7bc-4f3c-8aea-c53368f0b482"
|
|
}
|
|
],
|
|
"x_misp_comment": "draculax.myq-see.com: enriched via the farsight_passivedns module.",
|
|
"x_misp_meta_category": "network",
|
|
"x_misp_name": "passive-dns"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--7db9ef3b-7153-4e0a-8567-a815d40a5153",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:24:36.000Z",
|
|
"modified": "2021-03-31T15:24:36.000Z",
|
|
"labels": [
|
|
"misp:name=\"passive-dns\"",
|
|
"misp:meta-category=\"network\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rdata",
|
|
"value": "193.32.215.246",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: win08.zapto.org",
|
|
"uuid": "899e2a42-cb1c-4b91-b155-b436b326a40f"
|
|
},
|
|
{
|
|
"type": "counter",
|
|
"object_relation": "count",
|
|
"value": "8",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: win08.zapto.org",
|
|
"uuid": "6d80f406-36a1-4df7-857b-28c02c291498"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_first",
|
|
"value": "2020-06-15T08:43:17+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: win08.zapto.org",
|
|
"uuid": "f43a3e62-c93f-4206-983f-2b0e5cb0c342"
|
|
},
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "time_last",
|
|
"value": "2020-07-17T19:30:22+00:00",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: win08.zapto.org",
|
|
"uuid": "eac04d5e-bfd6-4a8e-aa3d-479cae783620"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrname",
|
|
"value": "win08.zapto.org.",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: win08.zapto.org",
|
|
"uuid": "dc47c47c-dfd9-4c95-a507-6f97cc8fb9cd"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "rrtype",
|
|
"value": "A",
|
|
"category": "Network activity",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: win08.zapto.org",
|
|
"uuid": "87f2b1d0-0b2d-462f-b9c6-6105e1e457d1"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "bailiwick",
|
|
"value": "zapto.org.",
|
|
"category": "Other",
|
|
"comment": "Result from a rrset lookup on DNSDB about the hostname: win08.zapto.org",
|
|
"uuid": "69508c60-4d59-43e7-8547-beb37c56f1e5"
|
|
}
|
|
],
|
|
"x_misp_comment": "win08.zapto.org: enriched via the farsight_passivedns module.",
|
|
"x_misp_meta_category": "network",
|
|
"x_misp_name": "passive-dns"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c71e929e-2fa3-4879-bcf1-9bc32a4b8d31",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:29:55.000Z",
|
|
"modified": "2021-03-31T15:29:55.000Z",
|
|
"pattern": "[file:hashes.MD5 = 'fcdcea564639169fa766d3c6c69bf7c0' AND file:hashes.SHA1 = 'd36444e57d3a020062862b2ea74184ac553e4f36' AND file:hashes.SHA256 = 'afe683c3c02ac87b88e2980dff9440f2db8889f981ae09109dfab3ef2efa9d6e']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:29:55Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "file"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"file\"",
|
|
"misp:meta-category=\"file\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--48f1c499-1a19-4a08-ade3-ecb57898a8df",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:29:55.000Z",
|
|
"modified": "2021-03-31T15:29:55.000Z",
|
|
"labels": [
|
|
"misp:name=\"virustotal-report\"",
|
|
"misp:meta-category=\"misc\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "last-submission",
|
|
"value": "2021-03-31T14:29:00+00:00",
|
|
"category": "Other",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "ffcc6eed-26db-4a07-9644-18f737e5b552"
|
|
},
|
|
{
|
|
"type": "link",
|
|
"object_relation": "permalink",
|
|
"value": "https://www.virustotal.com/gui/file/afe683c3c02ac87b88e2980dff9440f2db8889f981ae09109dfab3ef2efa9d6e/detection/f-afe683c3c02ac87b88e2980dff9440f2db8889f981ae09109dfab3ef2efa9d6e-1617200940",
|
|
"category": "Payload delivery",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "00b81593-c0dc-43fe-83c8-486a4261c09a"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "detection-ratio",
|
|
"value": "59/69",
|
|
"category": "Payload delivery",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "8de416b3-c3ba-49a9-9af4-5f028a297173"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "misc",
|
|
"x_misp_name": "virustotal-report"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8bba0110-45c5-4305-834f-c3aae9bb9724",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:29:55.000Z",
|
|
"modified": "2021-03-31T15:29:55.000Z",
|
|
"pattern": "[file:hashes.MD5 = '6c91051be47895e611d1c58644b1aa7c' AND file:hashes.SHA1 = '781e5feeee4ce625def4cc6101559ac818246c46' AND file:hashes.SHA256 = 'b91090cd27f4e34ac102ce77f40fb1d2fa38d75e492461b0f074158ac783464f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:29:55Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "file"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"file\"",
|
|
"misp:meta-category=\"file\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--58a6ff89-26c1-40b1-8672-fcf6caa50e30",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:29:55.000Z",
|
|
"modified": "2021-03-31T15:29:55.000Z",
|
|
"labels": [
|
|
"misp:name=\"virustotal-report\"",
|
|
"misp:meta-category=\"misc\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "last-submission",
|
|
"value": "2021-03-31T14:29:02+00:00",
|
|
"category": "Other",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "2ccf13dd-b365-49da-b819-be84a2b8d56f"
|
|
},
|
|
{
|
|
"type": "link",
|
|
"object_relation": "permalink",
|
|
"value": "https://www.virustotal.com/gui/file/b91090cd27f4e34ac102ce77f40fb1d2fa38d75e492461b0f074158ac783464f/detection/f-b91090cd27f4e34ac102ce77f40fb1d2fa38d75e492461b0f074158ac783464f-1617200942",
|
|
"category": "Payload delivery",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "845158b1-dfbb-487d-bc25-5cabc7bb9c1c"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "detection-ratio",
|
|
"value": "13/69",
|
|
"category": "Payload delivery",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "136e2d2a-8d0f-466b-a755-530592ea2b63"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "misc",
|
|
"x_misp_name": "virustotal-report"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e3da7832-33dc-46e3-afbc-d6fbf3494347",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:29:55.000Z",
|
|
"modified": "2021-03-31T15:29:55.000Z",
|
|
"pattern": "[file:hashes.MD5 = '67168e93e8d3b4df4bba255ce3ce945d' AND file:hashes.SHA1 = 'b2de1e545f6fa44835f8ace44604101de9adef82' AND file:hashes.SHA256 = 'e2b6de1933bbfbbab5e7b6c05e4529d4cef7473574281ac161a49e87d149b135']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:29:55Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "file"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"file\"",
|
|
"misp:meta-category=\"file\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--09842d3c-fe50-4168-b878-9997de0096a7",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:29:55.000Z",
|
|
"modified": "2021-03-31T15:29:55.000Z",
|
|
"labels": [
|
|
"misp:name=\"virustotal-report\"",
|
|
"misp:meta-category=\"misc\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "last-submission",
|
|
"value": "2021-03-31T14:29:03+00:00",
|
|
"category": "Other",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "2212a160-7708-4d03-8a75-b4bb4f7bc465"
|
|
},
|
|
{
|
|
"type": "link",
|
|
"object_relation": "permalink",
|
|
"value": "https://www.virustotal.com/gui/file/e2b6de1933bbfbbab5e7b6c05e4529d4cef7473574281ac161a49e87d149b135/detection/f-e2b6de1933bbfbbab5e7b6c05e4529d4cef7473574281ac161a49e87d149b135-1617200943",
|
|
"category": "Payload delivery",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "0485716e-f027-4c4f-bd46-91a954dbb472"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "detection-ratio",
|
|
"value": "2/69",
|
|
"category": "Payload delivery",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "8c2e219d-4c6a-45e6-af6d-c527aa434524"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "misc",
|
|
"x_misp_name": "virustotal-report"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2a5d7fd2-1243-438a-8a1b-82e12134db55",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:29:55.000Z",
|
|
"modified": "2021-03-31T15:29:55.000Z",
|
|
"pattern": "[file:hashes.MD5 = '863a63bc650ee61b7c1af221b37635bb' AND file:hashes.SHA1 = 'ad029daab838f930d5e0e357d751802499c203c6' AND file:hashes.SHA256 = '2725f56e664c751c536c421196de874f8c66a4347948596112273675a827a0b2']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:29:55Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "file"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"file\"",
|
|
"misp:meta-category=\"file\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--07f09fe9-afc3-4f94-ade6-c824d05401ed",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:29:55.000Z",
|
|
"modified": "2021-03-31T15:29:55.000Z",
|
|
"labels": [
|
|
"misp:name=\"virustotal-report\"",
|
|
"misp:meta-category=\"misc\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "last-submission",
|
|
"value": "2021-03-31T14:29:05+00:00",
|
|
"category": "Other",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "f12e4e2e-b626-4f13-bc4b-f880ec79ec06"
|
|
},
|
|
{
|
|
"type": "link",
|
|
"object_relation": "permalink",
|
|
"value": "https://www.virustotal.com/gui/file/2725f56e664c751c536c421196de874f8c66a4347948596112273675a827a0b2/detection/f-2725f56e664c751c536c421196de874f8c66a4347948596112273675a827a0b2-1617200945",
|
|
"category": "Payload delivery",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "74005de1-b81b-46b8-81dc-a0ff09b1e582"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "detection-ratio",
|
|
"value": "3/67",
|
|
"category": "Payload delivery",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "6ab5ab3e-260e-4608-bc3e-96166d7b36ea"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "misc",
|
|
"x_misp_name": "virustotal-report"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7e57f7ee-ed83-4dae-a3c8-cc0a7fe92498",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:29:55.000Z",
|
|
"modified": "2021-03-31T15:29:55.000Z",
|
|
"pattern": "[file:hashes.MD5 = '9bfd5d4342b527cae038ff77a3c872e2' AND file:hashes.SHA1 = '7897ad5edd38253818841071fe389f90d0c9c034' AND file:hashes.SHA256 = '0bfb087059a4c04cc55d8b691f3c6297e22f6e94b0354265a06382d9e725ee16']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:29:55Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "file"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"file\"",
|
|
"misp:meta-category=\"file\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--99a1ec6f-6c13-4820-ace5-01729b9563d0",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:29:55.000Z",
|
|
"modified": "2021-03-31T15:29:55.000Z",
|
|
"labels": [
|
|
"misp:name=\"virustotal-report\"",
|
|
"misp:meta-category=\"misc\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "last-submission",
|
|
"value": "2021-03-31T14:28:25+00:00",
|
|
"category": "Other",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "8db93db3-0205-4f43-8da5-aaac50ac67cb"
|
|
},
|
|
{
|
|
"type": "link",
|
|
"object_relation": "permalink",
|
|
"value": "https://www.virustotal.com/gui/file/0bfb087059a4c04cc55d8b691f3c6297e22f6e94b0354265a06382d9e725ee16/detection/f-0bfb087059a4c04cc55d8b691f3c6297e22f6e94b0354265a06382d9e725ee16-1617200905",
|
|
"category": "Payload delivery",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "dda6e592-0266-4345-abc7-e9186f07bd3d"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "detection-ratio",
|
|
"value": "58/70",
|
|
"category": "Payload delivery",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "40489e87-d217-460a-b966-d9892073b0ee"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "misc",
|
|
"x_misp_name": "virustotal-report"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9e70cc8f-8b80-46d1-8cf0-46f9871783b5",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:29:55.000Z",
|
|
"modified": "2021-03-31T15:29:55.000Z",
|
|
"pattern": "[file:hashes.MD5 = '5207b9a28b47ea13b7405b22d4300ec8' AND file:hashes.SHA1 = '40b39c273246de38f1c6405ba0fccb2bb2ae62c7' AND file:hashes.SHA256 = '2e50dcebf10fedf43a108fab866b930d2c53318e163098182c511418293a7997']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2021-03-31T15:29:55Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "file"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"file\"",
|
|
"misp:meta-category=\"file\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--a27f8d1e-0a1e-45ce-8e83-fc2438f382a3",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2021-03-31T15:29:55.000Z",
|
|
"modified": "2021-03-31T15:29:55.000Z",
|
|
"labels": [
|
|
"misp:name=\"virustotal-report\"",
|
|
"misp:meta-category=\"misc\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "datetime",
|
|
"object_relation": "last-submission",
|
|
"value": "2021-03-31T14:28:38+00:00",
|
|
"category": "Other",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "02ad0c07-fbee-4899-8b7e-e83d26840023"
|
|
},
|
|
{
|
|
"type": "link",
|
|
"object_relation": "permalink",
|
|
"value": "https://www.virustotal.com/gui/file/2e50dcebf10fedf43a108fab866b930d2c53318e163098182c511418293a7997/detection/f-2e50dcebf10fedf43a108fab866b930d2c53318e163098182c511418293a7997-1617200918",
|
|
"category": "Payload delivery",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "cc3df910-1253-4a40-b505-20c72b07419a"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "detection-ratio",
|
|
"value": "62/69",
|
|
"category": "Payload delivery",
|
|
"comment": "DROPPED VERIFIED SAMPLE",
|
|
"uuid": "2b13c1da-275b-41d2-9727-f2f2bfbd44ef"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "misc",
|
|
"x_misp_name": "virustotal-report"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--fb062d8c-d69e-4817-840b-6b213b900780",
|
|
"created": "2021-03-31T15:24:29.000Z",
|
|
"modified": "2021-03-31T15:24:29.000Z",
|
|
"relationship_type": "related-to",
|
|
"source_ref": "x-misp-object--f3c71db5-5bae-4c49-b80c-117bf59b48c7",
|
|
"target_ref": "indicator--ca97573c-8689-4917-bb79-eb6054b7215b"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4ccf1bd5-453b-4b7e-959b-8bc3c5d2025b",
|
|
"created": "2021-03-31T15:24:31.000Z",
|
|
"modified": "2021-03-31T15:24:31.000Z",
|
|
"relationship_type": "related-to",
|
|
"source_ref": "x-misp-object--bc480554-61ad-4e7f-944a-f0747675544d",
|
|
"target_ref": "indicator--0cbb0fd4-414c-4ab3-8e27-3dca5cce43f3"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--56e1a1a3-9ec5-46db-8c5d-f45dd559f42d",
|
|
"created": "2021-03-31T15:24:31.000Z",
|
|
"modified": "2021-03-31T15:24:31.000Z",
|
|
"relationship_type": "related-to",
|
|
"source_ref": "x-misp-object--19a1a277-66a9-43b3-916a-b3eab35ad817",
|
|
"target_ref": "indicator--0cbb0fd4-414c-4ab3-8e27-3dca5cce43f3"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ebd26a88-5452-40b3-b69b-40b1487eeea4",
|
|
"created": "2021-03-31T15:24:31.000Z",
|
|
"modified": "2021-03-31T15:24:31.000Z",
|
|
"relationship_type": "related-to",
|
|
"source_ref": "x-misp-object--c01928cb-f8eb-4b4d-a29c-6e4c268ff7ab",
|
|
"target_ref": "indicator--0cbb0fd4-414c-4ab3-8e27-3dca5cce43f3"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2884dede-eefe-4a33-b7a5-ab05220b094f",
|
|
"created": "2021-03-31T15:24:31.000Z",
|
|
"modified": "2021-03-31T15:24:31.000Z",
|
|
"relationship_type": "related-to",
|
|
"source_ref": "x-misp-object--e0403542-75ba-4f21-b811-68f28e75edae",
|
|
"target_ref": "indicator--0cbb0fd4-414c-4ab3-8e27-3dca5cce43f3"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--208b32b3-c030-4b2f-bd8f-bb254833dff1",
|
|
"created": "2021-03-31T15:24:31.000Z",
|
|
"modified": "2021-03-31T15:24:31.000Z",
|
|
"relationship_type": "related-to",
|
|
"source_ref": "x-misp-object--c89a5c0f-e2a4-42b9-a14d-a4e7b72c7ad2",
|
|
"target_ref": "indicator--0cbb0fd4-414c-4ab3-8e27-3dca5cce43f3"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5756a484-7638-4de0-9086-1cf257be16a6",
|
|
"created": "2021-03-31T15:24:36.000Z",
|
|
"modified": "2021-03-31T15:24:36.000Z",
|
|
"relationship_type": "related-to",
|
|
"source_ref": "x-misp-object--7db9ef3b-7153-4e0a-8567-a815d40a5153",
|
|
"target_ref": "indicator--749e7db4-9a56-41d7-8857-0a0c2a3b4e78"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3e20c380-99b6-4e86-90a4-70e9144e91a4",
|
|
"created": "2021-03-31T15:29:56.000Z",
|
|
"modified": "2021-03-31T15:29:56.000Z",
|
|
"relationship_type": "analysed-with",
|
|
"source_ref": "indicator--c71e929e-2fa3-4879-bcf1-9bc32a4b8d31",
|
|
"target_ref": "x-misp-object--48f1c499-1a19-4a08-ade3-ecb57898a8df"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b1c4ab17-631f-4204-b496-62619b155e1d",
|
|
"created": "2021-03-31T15:29:56.000Z",
|
|
"modified": "2021-03-31T15:29:56.000Z",
|
|
"relationship_type": "analysed-with",
|
|
"source_ref": "indicator--8bba0110-45c5-4305-834f-c3aae9bb9724",
|
|
"target_ref": "x-misp-object--58a6ff89-26c1-40b1-8672-fcf6caa50e30"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a2ee07f0-175c-4879-b6f7-90509bb76c05",
|
|
"created": "2021-03-31T15:29:56.000Z",
|
|
"modified": "2021-03-31T15:29:56.000Z",
|
|
"relationship_type": "analysed-with",
|
|
"source_ref": "indicator--e3da7832-33dc-46e3-afbc-d6fbf3494347",
|
|
"target_ref": "x-misp-object--09842d3c-fe50-4168-b878-9997de0096a7"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d15fd0df-7591-42ac-95b2-6ef1516e9410",
|
|
"created": "2021-03-31T15:29:56.000Z",
|
|
"modified": "2021-03-31T15:29:56.000Z",
|
|
"relationship_type": "analysed-with",
|
|
"source_ref": "indicator--2a5d7fd2-1243-438a-8a1b-82e12134db55",
|
|
"target_ref": "x-misp-object--07f09fe9-afc3-4f94-ade6-c824d05401ed"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--64070d1f-f1dc-494b-81d5-5efe9db56d9a",
|
|
"created": "2021-03-31T15:29:56.000Z",
|
|
"modified": "2021-03-31T15:29:56.000Z",
|
|
"relationship_type": "analysed-with",
|
|
"source_ref": "indicator--7e57f7ee-ed83-4dae-a3c8-cc0a7fe92498",
|
|
"target_ref": "x-misp-object--99a1ec6f-6c13-4820-ace5-01729b9563d0"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--20426b2b-8a54-49e3-9116-20b3a68f773c",
|
|
"created": "2021-03-31T15:29:56.000Z",
|
|
"modified": "2021-03-31T15:29:56.000Z",
|
|
"relationship_type": "analysed-with",
|
|
"source_ref": "indicator--9e70cc8f-8b80-46d1-8cf0-46f9871783b5",
|
|
"target_ref": "x-misp-object--a27f8d1e-0a1e-45ce-8e83-fc2438f382a3"
|
|
},
|
|
{
|
|
"type": "marking-definition",
|
|
"spec_version": "2.1",
|
|
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
|
|
"created": "2017-01-20T00:00:00.000Z",
|
|
"definition_type": "tlp",
|
|
"name": "TLP:WHITE",
|
|
"definition": {
|
|
"tlp": "white"
|
|
}
|
|
}
|
|
]
|
|
} |