2213 lines
No EOL
179 KiB
JSON
2213 lines
No EOL
179 KiB
JSON
{
|
|
"type": "bundle",
|
|
"id": "bundle--042a4478-fe19-4ed0-a309-b96da3542a95",
|
|
"objects": [
|
|
{
|
|
"type": "identity",
|
|
"spec_version": "2.1",
|
|
"id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T13:21:32.000Z",
|
|
"modified": "2023-01-13T13:21:32.000Z",
|
|
"name": "CIRCL",
|
|
"identity_class": "organization"
|
|
},
|
|
{
|
|
"type": "report",
|
|
"spec_version": "2.1",
|
|
"id": "report--042a4478-fe19-4ed0-a309-b96da3542a95",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T13:21:32.000Z",
|
|
"modified": "2023-01-13T13:21:32.000Z",
|
|
"name": "Analysis of FG-IR-22-398 \u2013 FortiOS - heap-based buffer overflow in SSLVPNd",
|
|
"published": "2023-01-13T13:21:41Z",
|
|
"object_refs": [
|
|
"indicator--23b95adf-c8dd-4835-b1e9-e23183d6bbba",
|
|
"indicator--f15ce3fd-c07f-456f-b07f-4e4a3f822d6c",
|
|
"indicator--2eb35a69-dbfb-42a6-8d8a-3e3e400de928",
|
|
"indicator--0d3771cb-5259-49e0-af8f-e106621d23d7",
|
|
"indicator--35236d47-2d7c-4789-a1b0-84f524b1ab52",
|
|
"indicator--fcd50948-9e1b-4672-b01e-1fab338ae212",
|
|
"indicator--015d8a1c-fea6-46ac-a049-7ead9345cc3f",
|
|
"indicator--19dd0c3e-652f-464d-ad26-2ddf1e59ec73",
|
|
"indicator--8a77b238-13e4-4489-9e4c-f95328677c03",
|
|
"indicator--18016fa2-0115-47ed-a944-02a80bb4322b",
|
|
"indicator--740c6d33-5ed3-439e-9c85-42b8ad063c4c",
|
|
"indicator--b24d7229-5422-4645-a761-cc9b1ee33dd7",
|
|
"indicator--a12c722c-ed6e-4b7e-8bf6-d38f93715333",
|
|
"indicator--a475e912-4841-400c-b468-7f07e1503d29",
|
|
"indicator--83616717-5013-4ec0-a241-08e1d5f0f1fa",
|
|
"indicator--ca47bd29-6c27-4060-9710-e094d20676f5",
|
|
"indicator--109e3980-b70e-4fc2-9692-0937386098e4",
|
|
"indicator--964fd5be-2ff8-4178-bc8d-8f9bec690395",
|
|
"indicator--c9c5d50e-35c9-4602-8984-80a794dcee5d",
|
|
"indicator--89a2bddc-dc5d-45c0-aac4-1e97fb5f9cee",
|
|
"indicator--a525d45e-d512-4490-869f-a5a85dd75224",
|
|
"indicator--f4452141-acfb-44a6-bec8-ad5093fc5eb3",
|
|
"indicator--77971734-97ba-409b-a2e6-191837911cc1",
|
|
"indicator--66b4b3d7-8f5f-4aa0-9d97-ff627526a059",
|
|
"indicator--89c2666b-6fb6-402d-8856-9b8b8ddb213d",
|
|
"indicator--c435d49f-a81b-430a-a50a-b7ed0433ca2e",
|
|
"indicator--8e787e2c-9fd7-473d-a4a9-cd17976d950c",
|
|
"indicator--d1584713-f07c-4901-b6d9-895c11ba496c",
|
|
"indicator--c53e5c82-971b-459c-8ffd-df3b33fc902a",
|
|
"x-misp-attribute--145f47e5-9a3e-4fd0-ae3a-8d2e1ee052fe",
|
|
"x-misp-object--e382ee4d-ca77-46bd-9029-7e0339bf620c",
|
|
"vulnerability--48f4d58c-85aa-4048-ac46-852d2ce4a23f",
|
|
"vulnerability--0dc13dec-e5ab-4c09-8811-41e9a45dbb9e",
|
|
"x-misp-object--d7cc6b5e-f357-4962-8c46-d19ceb040746",
|
|
"x-misp-object--4b7f16b4-5f75-4dfb-845b-3d859bcdf633",
|
|
"x-misp-object--50105082-3cf7-400c-bf75-c2aabcff8a87",
|
|
"indicator--622b381c-f334-4a45-bbef-aca8ca6ee335",
|
|
"x-misp-object--ad14186f-2ff5-4cc7-aafe-309529f30500",
|
|
"x-misp-object--e74e0eb4-85d1-431b-902c-5fce491462bc",
|
|
"indicator--c84b8cb1-2f0a-451c-8e85-59f68705e719",
|
|
"x-misp-object--3da68ddc-8324-43fa-bbe8-f7720dc32a2b",
|
|
"indicator--9b6a958e-9b18-407c-9aac-9f1f5dfb8f5b",
|
|
"indicator--9ec6fbe0-8d11-447a-a038-f6b0a86b9814",
|
|
"indicator--3e84fef6-6655-46a8-9a74-2e05e651c3d2",
|
|
"indicator--32d28275-7f48-4b1e-90cc-285cbeee0a0c",
|
|
"indicator--4919dc52-6dd4-4e94-839a-a1f0a955c307",
|
|
"x-misp-object--961a77bc-6824-49ae-815c-efb178e8e1b4",
|
|
"indicator--3547fe3b-4672-41f8-8b87-dd3754d7aeeb",
|
|
"x-misp-object--060f92b1-3a95-49fd-b14f-e33adbd2115b",
|
|
"x-misp-object--2f9cb5df-616d-4aa3-b759-2312259e013a",
|
|
"x-misp-object--a8529e6e-6cfa-4786-a272-086dc1106dd2",
|
|
"x-misp-object--c10402d1-6766-4ab4-8509-f157c123b61c",
|
|
"x-misp-object--b3922ef0-5926-4bcf-b1c5-622a6742dcec",
|
|
"x-misp-object--1d1e1173-a0cf-4808-a2ee-51234b20e355",
|
|
"x-misp-object--2c07d192-0cfc-44d7-a50d-ba5e19f39d8a",
|
|
"x-misp-object--3b93ed78-8588-44e1-9900-13cfd51d57e8",
|
|
"x-misp-object--47345dc1-759f-4d34-997a-79c8a0ff8600",
|
|
"note--54ae3ae3-3b28-48d2-8aa3-b65955287a9d",
|
|
"relationship--fd965220-4aaf-4289-8861-4d5219aafb48",
|
|
"relationship--53e9aa7d-8dc4-4037-8062-218db650f713"
|
|
],
|
|
"labels": [
|
|
"Threat-Report",
|
|
"misp:tool=\"MISP-STIX-Converter\"",
|
|
"misp-galaxy:sector=\"Government, Administration\"",
|
|
"type:OSINT",
|
|
"osint:lifetime=\"perpetual\"",
|
|
"osint:certainty=\"50\"",
|
|
"tlp:clear",
|
|
"misp-galaxy:country=\"russia\""
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--23b95adf-c8dd-4835-b1e9-e23183d6bbba",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:59:28.000Z",
|
|
"modified": "2023-01-13T08:59:28.000Z",
|
|
"description": "Hashes of post-exploitation implants",
|
|
"pattern": "[file:hashes.MD5 = 'f68c3f72270800ea675889e82bb02fb8']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T08:59:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f15ce3fd-c07f-456f-b07f-4e4a3f822d6c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:59:28.000Z",
|
|
"modified": "2023-01-13T08:59:28.000Z",
|
|
"description": "Hashes of post-exploitation implants",
|
|
"pattern": "[file:hashes.MD5 = 'e3f640d8785c0c864739529889b1863a']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T08:59:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2eb35a69-dbfb-42a6-8d8a-3e3e400de928",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:59:28.000Z",
|
|
"modified": "2023-01-13T08:59:28.000Z",
|
|
"description": "Hashes of post-exploitation implants",
|
|
"pattern": "[file:hashes.MD5 = '08cbaafb176ce6118f7e4e0b2d2d77cf']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T08:59:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0d3771cb-5259-49e0-af8f-e106621d23d7",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:59:28.000Z",
|
|
"modified": "2023-01-13T08:59:28.000Z",
|
|
"description": "Hashes of post-exploitation implants",
|
|
"pattern": "[file:hashes.MD5 = 'bdc2d2f5d5246f8956711bcce9f456b6']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T08:59:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--35236d47-2d7c-4789-a1b0-84f524b1ab52",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:59:28.000Z",
|
|
"modified": "2023-01-13T08:59:28.000Z",
|
|
"description": "Hashes of post-exploitation implants",
|
|
"pattern": "[file:hashes.MD5 = '4548fa6625cb154ab320833186117393']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T08:59:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fcd50948-9e1b-4672-b01e-1fab338ae212",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:59:28.000Z",
|
|
"modified": "2023-01-13T08:59:28.000Z",
|
|
"description": "Hashes of post-exploitation implants",
|
|
"pattern": "[file:hashes.MD5 = 'e5d989b651b3eb351e10e408d5a062b3']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T08:59:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--015d8a1c-fea6-46ac-a049-7ead9345cc3f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:59:28.000Z",
|
|
"modified": "2023-01-13T08:59:28.000Z",
|
|
"description": "Hashes of post-exploitation implants",
|
|
"pattern": "[file:hashes.MD5 = '3191cb2e06e9a30792309813793f78b6']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T08:59:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--19dd0c3e-652f-464d-ad26-2ddf1e59ec73",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:59:28.000Z",
|
|
"modified": "2023-01-13T08:59:28.000Z",
|
|
"description": "Hashes of post-exploitation implants",
|
|
"pattern": "[file:hashes.MD5 = '12e28c14bb7f7b9513a02e5857592ad7']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T08:59:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8a77b238-13e4-4489-9e4c-f95328677c03",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:59:28.000Z",
|
|
"modified": "2023-01-13T08:59:28.000Z",
|
|
"description": "Hashes of post-exploitation implants",
|
|
"pattern": "[file:hashes.MD5 = 'ae0839351721db5a9c269fd75dcb57ce']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T08:59:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--18016fa2-0115-47ed-a944-02a80bb4322b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:59:28.000Z",
|
|
"modified": "2023-01-13T08:59:28.000Z",
|
|
"description": "Hashes of post-exploitation implants",
|
|
"pattern": "[file:hashes.MD5 = '856341349dd954d82b112ba9165c4563']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T08:59:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--740c6d33-5ed3-439e-9c85-42b8ad063c4c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:12:45.000Z",
|
|
"modified": "2023-01-13T09:12:45.000Z",
|
|
"description": "Older Actor IP",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '156.251.162.76']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:12:45Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b24d7229-5422-4645-a761-cc9b1ee33dd7",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:12:53.000Z",
|
|
"modified": "2023-01-13T09:12:53.000Z",
|
|
"description": "Older Actor IP",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '156.251.163.19']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:12:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a12c722c-ed6e-4b7e-8bf6-d38f93715333",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:12:22.000Z",
|
|
"modified": "2023-01-13T09:12:22.000Z",
|
|
"description": "Older Actor IP",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '156.251.163.122']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:12:22Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a475e912-4841-400c-b468-7f07e1503d29",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:12:34.000Z",
|
|
"modified": "2023-01-13T09:12:34.000Z",
|
|
"description": "Older Actor IP",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '156.251.162.111']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:12:34Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--83616717-5013-4ec0-a241-08e1d5f0f1fa",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '139.180.184.197']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ca47bd29-6c27-4060-9710-e094d20676f5",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '66.42.91.32']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--109e3980-b70e-4fc2-9692-0937386098e4",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '158.247.221.101']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--964fd5be-2ff8-4178-bc8d-8f9bec690395",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '107.148.27.117']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c9c5d50e-35c9-4602-8984-80a794dcee5d",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '139.180.128.142']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--89a2bddc-dc5d-45c0-aac4-1e97fb5f9cee",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '155.138.224.122']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a525d45e-d512-4490-869f-a5a85dd75224",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.174.136.20']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f4452141-acfb-44a6-bec8-ad5093fc5eb3",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.86.229.220']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--77971734-97ba-409b-a2e6-191837911cc1",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.86.231.71']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--66b4b3d7-8f5f-4aa0-9d97-ff627526a059",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '139.99.35.116']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--89c2666b-6fb6-402d-8856-9b8b8ddb213d",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '139.99.37.119']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c435d49f-a81b-430a-a50a-b7ed0433ca2e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '194.62.42.105']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8e787e2c-9fd7-473d-a4a9-cd17976d950c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.250.149.32']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d1584713-f07c-4901-b6d9-895c11ba496c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '137.175.30.138']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c53e5c82-971b-459c-8ffd-df3b33fc902a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:15:53.000Z",
|
|
"modified": "2023-01-13T09:15:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '146.70.157.133']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:15:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--145f47e5-9a3e-4fd0-ae3a-8d2e1ee052fe",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:28:37.000Z",
|
|
"modified": "2023-01-13T09:28:37.000Z",
|
|
"labels": [
|
|
"misp:type=\"pattern-in-traffic\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Network activity",
|
|
"x_misp_comment": "By emulating the malware's execution, we found a unique string of bytes in its\u00a0communication with its command & control server\u00a0that can be used for an IPS signature.\u00a0 This string detects the TLS traffic by the TLS request header.\u00a0 The buffer \u201c\\x00\\x0C\\x08http/1.1\\x02h2\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0Fwww.example.com\u201d (unescaped) should appear inside the \u201cClient Hello\u201d packet.",
|
|
"x_misp_type": "pattern-in-traffic",
|
|
"x_misp_value": "\\x00\\x0C\\x08http/1.1\\x02h2\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0Fwww.example.com"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--e382ee4d-ca77-46bd-9029-7e0339bf620c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:54:09.000Z",
|
|
"modified": "2023-01-13T08:54:09.000Z",
|
|
"labels": [
|
|
"misp:name=\"report\"",
|
|
"misp:meta-category=\"misc\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "link",
|
|
"object_relation": "link",
|
|
"value": "https://www.fortinet.com/blog/psirt-blogs/analysis-of-fg-ir-22-398-fortios-heap-based-buffer-overflow-in-sslvpnd",
|
|
"category": "External analysis",
|
|
"uuid": "c3e0cd2c-3772-4695-bb62-54d0af792a89"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "summary",
|
|
"value": "Fortinet has published CVSS: Critical advisory FG-IR-22-398 / CVE-2022-42475 on Dec 12, 2022. The following writeup details our initial investigation into this malware and additional IoCs identified during our ongoing analysis.",
|
|
"category": "Other",
|
|
"uuid": "0c1a8b12-ac58-406a-9dd2-154fa18de957"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "type",
|
|
"value": "Blog",
|
|
"category": "Other",
|
|
"uuid": "113aa6d6-bbbb-4fc5-adb5-5d7795772079"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "misc",
|
|
"x_misp_name": "report"
|
|
},
|
|
{
|
|
"type": "vulnerability",
|
|
"spec_version": "2.1",
|
|
"id": "vulnerability--48f4d58c-85aa-4048-ac46-852d2ce4a23f",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:57:50.000Z",
|
|
"modified": "2023-01-13T08:57:50.000Z",
|
|
"name": "CVE-2022-42475",
|
|
"labels": [
|
|
"misp:name=\"vulnerability\"",
|
|
"misp:meta-category=\"vulnerability\"",
|
|
"misp:to_ids=\"False\""
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "cve",
|
|
"external_id": "CVE-2022-42475"
|
|
},
|
|
{
|
|
"source_name": "url",
|
|
"url": "https://www.fortiguard.com/psirt/FG-IR-22-398"
|
|
},
|
|
{
|
|
"source_name": "url",
|
|
"url": "https://cvepremium.circl.lu/cve/CVE-2022-42475"
|
|
}
|
|
],
|
|
"x_misp_state": "Published"
|
|
},
|
|
{
|
|
"type": "vulnerability",
|
|
"spec_version": "2.1",
|
|
"id": "vulnerability--0dc13dec-e5ab-4c09-8811-41e9a45dbb9e",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:58:01.000Z",
|
|
"modified": "2023-01-13T08:58:01.000Z",
|
|
"name": "CVE-2022-42475",
|
|
"description": "A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.",
|
|
"labels": [
|
|
"misp:name=\"vulnerability\"",
|
|
"misp:meta-category=\"vulnerability\"",
|
|
"misp:to_ids=\"False\""
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "cve",
|
|
"external_id": "CVE-2022-42475"
|
|
},
|
|
{
|
|
"source_name": "url",
|
|
"url": "https://fortiguard.com/psirt/FG-IR-22-398"
|
|
}
|
|
],
|
|
"x_misp_cvss_score": "9.8",
|
|
"x_misp_cvss_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
|
"x_misp_modified": "2023-01-09T17:30:00+00:00",
|
|
"x_misp_published": "2023-01-02T09:15:00+00:00",
|
|
"x_misp_state": "Published",
|
|
"x_misp_vulnerable_configuration": [
|
|
"cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.13:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.6.14:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.6:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.7:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.8:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.9:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.10:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.11:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.12:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.4.13:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.12:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.13:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.14:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.2.15:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*",
|
|
"cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.0.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.0.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.0.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.0.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.0.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.0.5:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.0.6:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.0.7:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.1.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.1.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.1.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.1.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fim-7901e:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fim-7904e:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fim-7910e:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fim-7920e:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fim-7921f:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fim-7941f:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fortigate-6300f:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fortigate-6300f-dc:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fortigate-6500f:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fortigate-6500f-dc:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fortigate-6501f:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fortigate-6501f-dc:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fortigate-6601f:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fortigate-6601f-dc:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fortigate-7030e:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fortigate-7040e:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fortigate-7060e:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fortigate-7121f:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fpm-7620e:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fpm-7620f:-:*:*:*:*:*:*:*",
|
|
"cpe:2.3:h:fortinet:fpm-7630e:-:*:*:*:*:*:*:*"
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--d7cc6b5e-f357-4962-8c46-d19ceb040746",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T08:58:03.000Z",
|
|
"modified": "2023-01-13T08:58:03.000Z",
|
|
"labels": [
|
|
"misp:name=\"weakness\"",
|
|
"misp:meta-category=\"vulnerability\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "weakness",
|
|
"object_relation": "id",
|
|
"value": "CWE-787",
|
|
"category": "External analysis",
|
|
"uuid": "ce73a5c3-f26c-4be4-bd9c-ba22f2ec6270"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "name",
|
|
"value": "Out-of-bounds Write",
|
|
"category": "Other",
|
|
"uuid": "51becf41-07bd-4e91-85d1-abbd324c6c4d"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "status",
|
|
"value": "Draft",
|
|
"category": "Other",
|
|
"uuid": "23898f79-54d5-4df9-978f-63979a4394aa"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "weakness-abs",
|
|
"value": "Base",
|
|
"category": "Other",
|
|
"uuid": "7d3aa669-4f64-44d5-9997-eb00ad00ea53"
|
|
}
|
|
],
|
|
"x_misp_comment": "CVE-2022-42475: Enriched via the cve_advanced module",
|
|
"x_misp_meta_category": "vulnerability",
|
|
"x_misp_name": "weakness"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--4b7f16b4-5f75-4dfb-845b-3d859bcdf633",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:03:16.000Z",
|
|
"modified": "2023-01-13T09:03:16.000Z",
|
|
"labels": [
|
|
"misp:name=\"virustotal-report\"",
|
|
"misp:meta-category=\"misc\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "link",
|
|
"object_relation": "permalink",
|
|
"value": "https://www.virustotal.com/gui/file/0184e3d3dd8f4778d192d07e2caf44211141a570d45bb47a87894c68ebebeabb",
|
|
"category": "External analysis",
|
|
"uuid": "0d1b4e81-b0c3-4f01-afcb-7a44502b206a"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "detection-ratio",
|
|
"value": "20/63",
|
|
"category": "External analysis",
|
|
"uuid": "f4403481-b830-4610-80f8-600e3efc7740"
|
|
}
|
|
],
|
|
"x_misp_comment": "3191cb2e06e9a30792309813793f78b6: enriched via the virustotal module.",
|
|
"x_misp_meta_category": "misc",
|
|
"x_misp_name": "virustotal-report"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--50105082-3cf7-400c-bf75-c2aabcff8a87",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:03:01.000Z",
|
|
"modified": "2023-01-13T09:03:01.000Z",
|
|
"labels": [
|
|
"misp:name=\"virustotal-report\"",
|
|
"misp:meta-category=\"misc\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "link",
|
|
"object_relation": "permalink",
|
|
"value": "https://www.virustotal.com/gui/ip_address/155.138.224.122",
|
|
"category": "External analysis",
|
|
"uuid": "b38daa57-d585-48cc-bc1d-d33c3b731e59"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "detection-ratio",
|
|
"value": "9/88",
|
|
"category": "External analysis",
|
|
"uuid": "5ed5cff5-18d0-4380-b05c-a5bf38c12680"
|
|
}
|
|
],
|
|
"x_misp_comment": "3191cb2e06e9a30792309813793f78b6: enriched via the virustotal module.",
|
|
"x_misp_meta_category": "misc",
|
|
"x_misp_name": "virustotal-report"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--622b381c-f334-4a45-bbef-aca8ca6ee335",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:02:47.000Z",
|
|
"modified": "2023-01-13T09:02:47.000Z",
|
|
"description": "3191cb2e06e9a30792309813793f78b6: enriched via the virustotal module.",
|
|
"pattern": "[domain-name:resolves_to_refs[*].value = '155.138.224.122']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:02:47Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "network"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"domain-ip\"",
|
|
"misp:meta-category=\"network\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--ad14186f-2ff5-4cc7-aafe-309529f30500",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:02:34.000Z",
|
|
"modified": "2023-01-13T09:02:34.000Z",
|
|
"labels": [
|
|
"misp:name=\"virustotal-report\"",
|
|
"misp:meta-category=\"misc\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "link",
|
|
"object_relation": "permalink",
|
|
"value": "https://www.virustotal.com/gui/file/23f2536aec6a4977a504312ff5863468ba2900fece735acd775d0ae455b4cd4d",
|
|
"category": "External analysis",
|
|
"uuid": "420f124a-51a6-47ea-b337-49001dee28cc"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "detection-ratio",
|
|
"value": "21/63",
|
|
"category": "External analysis",
|
|
"uuid": "990bc7ad-4c4b-48d7-bebc-10a56a43544a"
|
|
}
|
|
],
|
|
"x_misp_comment": "856341349dd954d82b112ba9165c4563: enriched via the virustotal module.",
|
|
"x_misp_meta_category": "misc",
|
|
"x_misp_name": "virustotal-report"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--e74e0eb4-85d1-431b-902c-5fce491462bc",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:02:20.000Z",
|
|
"modified": "2023-01-13T09:02:20.000Z",
|
|
"labels": [
|
|
"misp:name=\"virustotal-report\"",
|
|
"misp:meta-category=\"misc\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "link",
|
|
"object_relation": "permalink",
|
|
"value": "https://www.virustotal.com/gui/ip_address/107.148.27.117",
|
|
"category": "External analysis",
|
|
"uuid": "819e7750-7fa2-49dc-b68a-fee2b2de07ca"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "detection-ratio",
|
|
"value": "10/88",
|
|
"category": "External analysis",
|
|
"uuid": "066a1449-5f70-4317-bbf0-289c64bf65aa"
|
|
}
|
|
],
|
|
"x_misp_comment": "856341349dd954d82b112ba9165c4563: enriched via the virustotal module.",
|
|
"x_misp_meta_category": "misc",
|
|
"x_misp_name": "virustotal-report"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c84b8cb1-2f0a-451c-8e85-59f68705e719",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:01:59.000Z",
|
|
"modified": "2023-01-13T09:01:59.000Z",
|
|
"description": "856341349dd954d82b112ba9165c4563: enriched via the virustotal module.",
|
|
"pattern": "[domain-name:resolves_to_refs[*].value = '107.148.27.117']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:01:59Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "network"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"domain-ip\"",
|
|
"misp:meta-category=\"network\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--3da68ddc-8324-43fa-bbe8-f7720dc32a2b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:03:50.000Z",
|
|
"modified": "2023-01-13T09:03:50.000Z",
|
|
"labels": [
|
|
"misp:name=\"ja3\"",
|
|
"misp:meta-category=\"network\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "ja3-fingerprint-md5",
|
|
"object_relation": "ja3-fingerprint-md5",
|
|
"value": "bf2b95ac267823f6588b2436bc537b26",
|
|
"category": "Network activity",
|
|
"to_ids": true,
|
|
"uuid": "d3a8c1fb-b989-457b-806b-e48892c77942"
|
|
}
|
|
],
|
|
"x_misp_comment": "The JA3 for the malware SSL/TLS client connection appears to be unique to the malware and can be used to detect an attack.",
|
|
"x_misp_meta_category": "network",
|
|
"x_misp_name": "ja3"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9b6a958e-9b18-407c-9aac-9f1f5dfb8f5b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:05:16.000Z",
|
|
"modified": "2023-01-13T09:05:16.000Z",
|
|
"pattern": "[file:hashes.MD5 = '54bbea35b095ddfe9740df97b693627b' AND file:hashes.SHA1 = '08760cb1d322269dbe62d9a642697ac71306fbe3' AND file:hashes.SHA256 = '61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4' AND file:hashes.SHA512 = 'c0c33975fc3338be2d18daef09f8a156f3bf2038af05b28980bdcbc855bd8875869ad904584cf822f6ebd58fdcbc39c07f5ab6fdd1e13f3cab641faf76e2c0ea' AND file:hashes.SSDEEP = '3072:MzT/0/ENklKQLrAuyaxSHC5inA+LzfLXDvbnT/r3jP7HzL/3zXvbnT/ry5:2mKQLrAuPxK1A+LzfLXDvbnT/r3jP7HQ' AND file:name = '61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4' AND file:size = '99328' AND (file:content_ref.payload_bin = 'UEsDBBQACQAIAKhILVZe4FMKtcQAAACEAQAgABwANTRiYmVhMzViMDk1ZGRmZTk3NDBkZjk3YjY5MzYyN2JVVAkAA8wewWPMHsFjdXgLAAEEIQAAAAQhAAAAblouTwlLkTDBfu7kf8UObT+RVqtMv8YkNgE+n1lvMXO8PydPeJEZi1A7+D0x+50kT8kO4uw1b8tIi/GQ0vhxcbUUuNH4/VA2VL15XtMY0852b6Cg9j66zW5x0b86soLE6AP/FUikQFochzvpNwD5wgOvxHJn+e6Bw4gMKxkmIEwjJ9vKtr+Q7iDkpyy56QmZxMezWPvZCT3/2hbfl5OiXhqr814v0q63lFDrrKfzdn+/lUDZvrQVvIVaapq5m1uR30wU4DllYJS3WbG1Kyncw4dy6xwPB4LBKSHF2SMSgsXFlK08181fXeetSr3qsDKsev+pHdTJDaPin2n7/zrLv5pIydEmtGEBAgR9zYDQZifU59ZkGNtL6g2ieY/9PrmUWvXkwUAh+JW5m4SlRQKxJ04Ppgp4pLabUHhv0BQpAuMlGK3LXcxAq2COcDmPEx5pDzC3WiY1ejbNoHonRT63s26oPGF7yhOzSUIzzm0gtfRvxuIjYBoOJSf3+dsFHe+7ZM9X5vthvPS6pXm7qkx4Lb2sFe1TzRmRSPKEggJ1qUmay6RJbYOqVHKzl3dgOr5G65wJbeNtSn//bWgrcizO+zFSXSRMQQfKMYVrj6t/6Xkb76AWAlbp2XZOeqd4cU7EhTx6uZxiLmDPaFET6gbWzm/KD0Sv7B6hijl4h8GkUrGn01jzTG0Y2VBPZSQVTqPOJcWPNwVM2Dj9nI85w4IXzDfD4jsUBWixOnECMqOoLvRoajmutYmvCPmLlXImG/iMcMZXfGMfTFzzpInqa2qK+22VMjryyDJKyOezI8F59D2kadSpzW6eEL+z6zkj+SJhJd99fywNTi1JiUpBNgOUUkdU+ehpPZtvHmHx3tg7pGAVXzk+c7D+XzvknVgjv8LydVUUZuA19AAOKnnuXYng+qF6g8HLkBkF1H1FFIPEok4mEgz/CJJO6Idsadf/n6cy/IJLrO5cvW39kmZ0vjfWnnyPPUgY5HF1JYXdBLPI9vcNCMmoI8lN4YZtJbm4LP17Ds5Z90YWC+i61po/6I/YE7SX5iJ0utJeXnk9s7cfhR4zR95s/qHg8xfYwqC171RK827cTBb6JVajcvLqVFKghIE0KcZs+exAe4+zDfMdOT+sq07UAkam7kGf429v4IYoZmqHEhVhBtrIY8ssJ/I+6m88j4AOgaIATOcU4d7i0DGhvsrzOc7Rayylg/5VYEticiqAghOn4TK4gmNA3Mq5oxkIQX6DUBcgu5yJ2TjasOBbxOidWs7XmgFCFqGLq5NkKPhDVa7X/nSyxTXHO3LVN+Im3gf+DT+Y1L7nbGGL2cN7MQlfS1KM5VmvDGtaNDg0hxiC7dRlGVrCSijEhYIHI/YNAZ8DnC5xHLfro1NQDb2Iz+7IBpnIJbRdJ3vODO5NQQsfZvx7aee18yxTZ06nA49qxj4XFK/cSIPHiYOAk4V2txxy/V7cUmCmMZPY7gyULYz0kTFC7QJAl6shoUh7D2VaePM3KgXUdPtzyFVTUGtmeyyu0VAn2Sq3kWr0xDozPHxLy7h6nr88OQdEC254n1mz0Pl5Nsw5fCwOtukAm7rczOnzkMLzWWA0wwOlWU7fh41uIuUVZbD9e1bIa78xVHCAuh3v8Ei8DoIVn0Q0RowyvoybM+LaiTFGByRpTBOOMDFVHPXwpD99Rs6aaN9AZwmfgGtkp4+zaiwB1H5BMqzVA4QtGytPrq4Ec/Iez6rmuehl6Os4HCuSEvBdLbpSTnf2KkKlRFg7ZTHCAB/3dm0W9Dif0v5KBempnvBOxXGznCY/z5k+7jM55cycxuN4MNjgr3KK/gLSvSymHuk26xhiaDH2uVgi+CZZ7VQYM5uwkrouGdRbghysSMSaiFTarUmCcOch53B6mGetpVLsByfKjzPNANVV+iCsFAv6iM1Nc1/awvDZcSMBSCnoiogo3xwFt6gpVZOXBuEnj28NpvMoEUZXWcKM+f4kGz+eUmHI94ERR3ZjXlq6WXLo8O3uZPUOwEBHr/2kWysHmb4fn/CUngGHk11C1X4j99en9hIGa2/+qszsQXDramG6mXVZUFbgRrYqat4ZkM7gw/5Nw6IJHTtCvuOu/QlVLavazaoS0a3VvjkZXdRJUp4il3A/hhVl5FxB03xqvGUY9vmjqgrSc89QK5+PZULCvvTsw/02T9CurkbRESTCkmyIX91+fjxlzQ9sopM+0RUj13j5n0DnbZLRu3ei7N/M0JZ5olS/bWeJgS/TJfBQvF1svXtS/Xn/frMwIllh0IRBQMYM0IuRVGyQdp8EWSbc/mGhmAfnbkmJ2cCdyMVkCJ7L8nB4oEk4g5j574UggCJS8SIG48/lXWvQure9kC0r1fBccAl78f/rhjaqrrog6FNmFRYrkN2DuYdlvE1QSmEao7vVRXjRB1zBkD16BASj5daDtpI4ef0/ukQ/x3cCyolwbOVHmxTMAn5N324ovn/sN0B52qJ3aZTfNiLUlAEL7OFvsL9gvvWEwp12YwHKyV7O7HYY0fn0Viai/2Y+Or9Yu0XlvGcITn4LP1Cd272qqPj6yPnovQFMAedkvJUQfPmuGrAcRD52a8DUaM3YJekN4W2DfVdTT5xCEWEfCKAH3t3Dc4jH3pIQ0Ao3olNuN6PEBTtUWR9p5eGKpL6Wk643P6AO5liTu9EcJO9il/7OaRR6O5gUisDxVGDxH2aJzPAMlSd8hRdp8u+mv1M8Oeni+Dn52NvUp4+xCWACT/M+7ee0+CWuM5PBxbvPv8yp1rN5xTHEfNQ9suApe7I20t2VXCf4sE4jzU9n4rKcOjSDkYD3AsCRs/oxMek7Gn7v+SgIynRS8Aydegzqoz7c/yV/vl7sWPHgYwBnxLxa/DRIkN/BbLefoM+fVYcMptXVsa4DvxAUVX0RoBFewkF9DgDgYOgA+J4+QK+Af/R2L/kddmg2ScSm7gmagEhLdRlEvfNiNFhYbxU6eyxHciKGAron25QFaSIjArcYRxSaia7KWWuX9/HqdQotMlIe6DrDIXRVj3yAkfJmsv4w6XedK+/0QlyXvZG2AXQaBPgDxf4UbFBQigdtG9Xpu5sTQT9+eFAdECRMAUVQXKTX4h30HhnDBagpE2MR90LBktYl0ne6I6MTAhiu7/ZXpdAo72N23lFDu5NRZpmk7eHUxHpUFJP1rPdEiMLgXsGdUYGk3Thalv+Umh+wq+R+tWYQYbsCxuaB+qifDAjHEDAskYe93ULo3qlGO4J0VmS6scGVm5yOKhutkreW8+umQkAlUvHGYBXUywVhJ/fVAQhExu8TxVP9bcFJIrbAjxMehrwmz6X3lZ4W+poLwmRa8GRu/NNdc+SD8Bd9fr/DQojcRpa7MeGTmwmJtULkPSG6Ypv75kNqE4ou44KU0IQs+1vN6lZI356++tiYbk+RUN8cQjWywuGcChyfm9sfaAN8ZkiGS5O+fWiL+jeOk4RqnVYqaEDijZxTyDpkMcwKojJ100pQXtAlEsiNAyn9UTR+WyFLj1f+z5mCMkTf8Rakhf9fxhuxsh3OYZHE41IIoFZDX803T3XjE4j0FyzoMLTSWMz54Wd0Agifu53tue9uZEGZdKmLGKr1qrDpobg0HqQwsn9VxBk4tnAajYP+XTYmB3/rjcNwM9DM+dz5f92fgFVGiFfZ+1TA4UykI2RhFU3lHZdFRWDos7SZYVae8yRm+tCBVVg3yJX2ZyuQNCGeH2ySiDopuPKezubIT3AV+0VRu9uMIxqoguOWolNpYXqASE0G6KjsZPv7CLtE9fRt6UjrUwWxmkYPw+HQYK98HwuImsqTfiqc9r7/cIU/gA+/Mt/aI2oKDyigwT5jLE25L1+bxkE2Enu8sNAYtl0hONEdJS8RUMf58uIWmcmvnxvO+bGybJv2LHM4GVez5Px58puHd8SPNwNa8XjVi8PGfDZf4TOmcv3TMcC9YesLq2QJeb5jHN9k/R4Y4S6DWXbbQYDap+SHH8mTezuQm4YA75IxrvSF9XfVCV/vj3StBrYM3JU3wzwOPt7YT+nm32fVOJJEtfO6qbWcS108wBqcEYpRIjnuEbP8rn6h4nrU82tm2WB2agjp2Z2WOMWFBmGgU1sMPNak49w4YSKxmrNPuOLsC77PQ4e/9oZFReUebpxUG1XUVOyBgPdaEKdTpy/L4u5pUqbhgL5yFxCCfXlh6pNLi+QL0zDGyw6tmcpH3OcdJehsiCOIekkK8V3yCNSqp48KzNJOxMMtinkf2ORDB+fE2zdCN9ePNzhlA9bBw9ELOraMfxTIstpOhUmAT3rozyc9kHSBRELJ1oEp/ivmEciuz71nTdtlrSkLlvIqJD4QBK1GG6/iNcwWOm4EWbEL854xVylvcvWhjBgdXZkVWNi1gzgARcJJ7TbY8zUA3QDIx/iudelH2f+oA54jnzLC1tXHUk2D67G1EhLk8Cqrz7wDlptf7NW2cIqjULEyBdkurumQFWjL0EPulIZa0p+lEWz0yiNArolsvpiC6BkGdhEoWb/oqxDmjB1zUS8bkpYK/xH5zuj+7c7ABEyXl7QbsGQExFYsjN8LsXLuVsvBFnWwavYAHMNIT7vGsFzNRciWRJIhP1rrF/h4b2p4e5L6ZjRt2Cn1VfL+L56jbZ1NfjkdS+r0RtbOxJaU5rcCD1zi3YL+P3P5JXo3C1FgtwlD3VW3LL7PlvKwpJvpXzDdNhR9xHiNo2gFAKKNmhC5Wxn+Fg4/CKGcHcFbyS91wnvUZwol4c4inA+tciACjvyFLvf2VK+m7y5S/cw9Y5ESGEOPyBbRC8OO2kvmwF79zXyqGVTGgxl/FMvWGrF98fqxJ6B9bJACmT6xNsEu8eJLaRnuDqi2wdg3C9kZdr5vP3auIt4Gj2xanoPm9iWfl9kSi48rmngbR3MSG7AJwtWNx3xFWfSEx/rDmYUXdbBViNsgnhJqbWoAjKBIMlXoaVWunwlMvlzi902hlrdhg32Xl1GX+4o1lj4Kw0vVyOMEijgQz4aPf0/qbtvHScedR6V2Gbo3pfNVS/h5aNrW9uaJiwmTMqGB/pQvsh5OepknhBziIFjLVrhAp6T5IDHqKSoVjpSRK9Xaqq/PyRN9iAnBMpsk4KNXyu5wPeqb43su5akDCZBlY1DxxPpp59T88DfBDj4cLGomXBARWONc6s8aCdMb/NaZ1rH7P+hINtGCgUTFu0he8QnKygttNO1MTmwduhUIJJ2APCyDoBsXtrvqZwR95PPE6LWIyBRTK/D5zOShYRbFKqXQafSC/bwyTft0Y2FE9YAS7U1wP/tMQ+0OU2GrPYr6V8Lj4ehRGnzCWbfBYL2V8FZgfzlE16NPfuaIt/uVcFPCysBb71MIIJq8nlJS8jNV4r4Zk4M+P8V0N32lsgj+PgLI4pjku6cFMYatyIUANMUeQCqLOIFNuF+u0ygnwBH9zsZRs4nplmX2qUZS0TJVpiUo1kQp9FGuQsMwXdaVmeOIsJixzvv8Ow7COr+QW8MknviGqaviJre3Og5y4ukMlzAVioq91OPDl9nyGu/2cZ8IIO5SngBwxOsz/2c/EU1nL2xfScslIQAdDjU+bx0Exjwu0O5yUvPyErSAsuBVH+kfpVte2PBPy5q/AQRRq6y+FfxqVPsU3Z9GzWpyCEG79FtxJP/qi4k9cZhGl+5iUkelsaJf26enmHWlr3ZqPYyGIJySXVWX6vO/GOThD8t9ObEElXXsTlrdrF3QmwCIqyJjWuJcQJ1KZ4rz2+ltWAny376rBIon50OZ4FTtj4gXLbbI+i+OmRRqyBaUi9taMAwyle8IxrK/8nkU2NmWOZ+kIULe3eYLTeZUAlturK6VKwHV/IQsX9ZjFQJr5T4SMKTOhlxbSf3wfT5lkGVxYFgt2e9+naJSHKZAhgcEtklWOwpXEsY74HSePGeOKaJkrlTmRy3oHq9alpTJdylZvUjEU4zV2odTf4i35js1tFUR3vVzOnrHAlVRuIBOpT482hoPM0+0z2UMKi+2Po27BJoeRK4EqLZ2GHw1HfE2sNp5EXIlyIzkQ/GvM40UxULJ2Ga5JKFEgs05EgHBhgG3dT5DOSQGRfAHDlK+miE6a0q6g9YcXPbbl2WFZO7K5DacTSbut6+dCJbj8mGv0wdzdXxEm6AVtP/fEx08KERbWHMKOq6SUaeWx35IYzPLzKnJkh4EaMDxUI89e5v5m8XtW7SUbs4CZ0f3QbVPj8k/sz18mZD7SZvb6P7bt2d34oID4vjEZbuUcwh/gfvs1QVgXzV3oun5k2mSD+0igkiyH5RTnWt2iiKNPowKBcGFJ9GBRLlWHgdYyxORCHmFV+wZQqWcpuPxBeXEqppaU99bm3PPYNFeOkIZnApdpLzG+Qb0liSkyQtX3MdPV82DG1mFsJoDZmKz2QRx+zeBH6iQnOFdJK9DPb66cNwrFS2uNYLnBlnONBGB3vWWu0rx+NZrjbhs0vWsWeAFaTWeQm9Qpla2jmZG6cj4hmhjAt28JXR89Ww2TBSwh2OeocubgUJUoGxdm64dkwuPr7mWCksPFYpjYf87rUaHsYwame6I2qQvCoj5B08ZPOPFT+IXI0YAav2to+YbpANTyD0CXSE8mlSPMTSb0D/RVVJ0GR8w434XcKBYZGUGE+t0rcG50qCzirs8YTczJOhb5GvDvquOePa9sadiaoI2jD1AYmg06mEkEOkjVZif0OCevSMCiLaBQW6ripvvNvCDq4M1GFhVfpS9tJxVkZ4Q0o2dRqIuwxshElR2OBcRzntofJYhalVJmA3lGUreGNUJerbfNXyZyysRSV5NCZBRg5LYWapvlBNpqoT4L9OP44aPn/Ii4cImD6guVw4fYNTEZQIOc83zsuOlPRRaWQ2T63l26ald7TWwnhJFek6kClO64hli0bbwRH0si8hK+GI3blesZKU+eFZUfopvT4PIGj8+GlpXCvN9PgCajbkZpbFrkm2RW/H9C1sJOepECywCZOgTDR4BU1qo6+uG1uWzDCwP2Qj8SBnbMEVZmvk4EV33EzOTfcpGEUPj0ZNixdfL0EQx5SHMp2/4cs/OfUGnXgbVCYMtJLk4zr5eU7fdz2rM6RCjxSfA1/STXMh3ioQkl3Lv7zsnPFvIuUe8Poa5kpKMdhaptSInYSPVoXPb6jEQfaizX7swXHTPnntYlBH5+94hbOkTpTvbVAPQsko1Kg58ALFyzxX+M+f95LQRHUNdBsPMqUJTRrbCtSeKTSDCIB9BdYdOAtUdwk3DZe0Kv8jU+5+HHRqmEDr+/nchYTuQcqmHhUcQZeR6b2NCj0mN9/dcTDC4HpwQX3VBiVL1RsIXPrnQfgkGHtC6q/5BemEjSd5OWMsSs3NTCB2uo81sxnitDxdye9bGJZcFYqh4ERBAhT9tfl54AXqKoRay+LA8WH0eJ+z8dgb5k3aNs6kZSOAi4k/IKxq9YtuIDKPQ0oe43FQKk/dCY5REIImAsLycW/ymn0NrEYxyShJgpAUtvIvsjQ2EFI673voVD3WkNJNkVU6DdhcA3jlg6igNXpHys0A6VEcXj6LnDtyMsEQHxGBFamZvqpfbJHxN4tArFvLL4Bc//C3vCVIpuvFbzGkFWOH/7FESU2cRYuuUQd9bmI20EH5meul2EqaQ49q3o8lz50dCzgJM+CMP0kOxm7e0/J3LGmDTvQazCydxPeQKvjl6ZjYtB5QcPgBiwpPJ9KHsebGkJ79c5k/4b5Dgu8lCNrbPso4trt2k4+27E8DHC+CsLNWa68PMtkWzZaN2nvPug02lFzet+Q9EkRMJ+39wkyF+exi0YNINfXCRMSLDY8dUiCpVdwxggpLFV4DmrApAn2seFk1X1x1w2MJnnP1ofny/9lCoDJj4AIBSuGLmzcezHvGXlMRMMkTKveErhEsIGKQoTRBUMcXzu5l+K2Wn44UC5sTr8NVrPeT8tErxO0MLW2MH/M0zTUotYhqBwsAHpl/GS0nYYFmIiIqcX6BcRiXqrxHVazstCg65Cmcs+tFNXcuG5kaDTfNIGH9xE6a3FWf/sxDn3QPzm/vhEW4tl7BnGxkuMa2gIlZrrsYbqbZ3w2UDqSdLl02sxpKd7SNrEFB9yyR/7blbW3JfOQHbXRQ8jPHoDii9EKZiGBH1tL3W9S38fajZ2I+Rp/G4fv5gW0OywtEZQ0rtEwu2FxFlbnqW9FcKs4SjlH3CO/g83cnBfWalfFmFMpMXfIar1/z/lv7T8cVb+AVgz+y5p5oHaCLqcnr7CRo3o3MAwF99UYeBFb5EfdoRQTLtdFBzGhzKiLb+y0vLSxGvKw5DFKmioEbcerZlcz5vzKZJVuEhl2jitzA66yj9cKMGD7pDnYE6vrlV/7gWchwJsSX/MNxVxwy7U5p1xsrehRPuTgBgsD3p7TzzGthlAge5cMynnjOh/QqgyFV9gvp4no4LEuQzkKCYdGgSViw9ZVIwt8hHR35xSzw6ibvuSN4M0VvdL7d1QJ9wn5f7xM75FA1GKx9zQD/5A3qUXFk4wk+xKkTAZ6QvQcKUdjpM8FwJ0t2OpC56YAN6blU4noUvtGABLdh/gnAwTveoWUKvSAOLtp2jgvhTIqgng0LBiXdThdob8MD+IrWB5E0yo4ktf7l1lsEMfKD7h89NrudTDsHnk3M3IcGrYWl3vEtC2K9MR1PMUvZrR+EGEnaiqaENhKeTJlzJSWWC525721YTYXdAsFLvIfPXfmxVFjvy//ypjtk8txHr4h9bxzJFPi4W58EHO2mzGVpF08NzM7zmPNUN95rviZ337Ove/pYJ35UT0mdSuW0boFtp2MHAsTBOlSkMX5gTagJJwUfJW/4hr0dnmVd9oaFde3oSUQ3/REalAcg9eq20YJZgFIKhVjR6lWIxn1XhrBw/idtGsCFzcuKwmCxI4G/2yixNMTT7I6Hmx/uPXUxY/aMfmIpLv8qOJEw6UwgbajqTGQMct4Qlb6sGhQNxJsTZIt/6cq/vlzbVxOzrnjDvc5zIK3pgVxqOjxs7fJuiloCQjEjY0QyYK4SYXCe4D8gHwDSHsfc4ZgF2oG5X0lyblLoOMs/1R/gexkmAtHxyO6cZEKe5/Q2D9cRNhJhutw+t033orujAgUd5NnW2mREiekKd8LEiKDgFOZ9j7GjBm5oxxP49M0/wn01EXwRQm329Qn/QBZFVBqC0ou3GCqw/Wh/TnPSdE+M5fO0FnD+Rah54jEXATtSfc61F5OEzTexmBNrq/FZWpg6lrt1B+5Zs6uNzbIppr2q25KRqlWn2EA8kTLkoQblNApyw5/dlHF5oc2YexHh2VbY4L02hCExwB3evLCFNhP/S3EL5gGFqswt8LJSmY9Jq4pZ0KFijeokQzYqBOUlKKBj7pbDnJs2BrsG1mZntpJ0N4Vl+eT26bTvfbYW8vs9vmfbzJXCuThaU7mU5zPG6KcGbCGeo+4R7g3ol88E2WuQPKE+RWbxtzvJaIqknLCwQUPnlMKTreHvw/MF65rp4f7lqNIwAolMUECjnRiGCQTCYNiM8Q21Zms0p4UrKqEnrUBTumgZJJRdBg+uodCfcJIg7mK/7SHQW/MZu0U/ILTt1aDzPtFowP1zbXlhgaiigkGswm3UvthzNPrxphdkZqEtCo1kLVD+NLAk6BmAZ6K2cShlryWIJpXSUdaeoPWpghU633isKG0hrvJ5ML8VyTY25uUBJZLM964mG+zAnrJ4/KNBLai3G0Orq6QP3AUzYoYUIzJNsvZtskf7vSMGQfMOImCugVFVMa5Te6Dovf6ZDq0PIN3TyFJHPpoZKv6AdFjkpOiWUws75PVGZYNR+FP2IjHholZrL7JMKXqcKdIAEWSOViZ0AJHfXMgI+RRQDudeeCxOfg4j2QqEcCdzfhoPeH+kC/ZR3Lt3qPVDjT38dg0mJiWEi3Mo8c0DLZ2qhNLFd0OrDUIeLJnkCDFZy2aTzRUYruJdFwL0Gi1Eai6m5AoaHVvxvJU2Ft+Vpzlg7vB1vQFw3FMVOAq1f6Sl5bZOKlte5rzKZ9xM+bi0/DTSKs6+kAJNMcUlxFDQxMyQF6UoDSSqMbZK5fS0hbwzCO/lyjLX7BRR6q1o0bD7aTcQ3MfBGBuvl2WXzHp3Bs/drv8DpgXqk9mYmGsyh+M+0aU0Z0BC7o2vUMbnZq2EN6ERn3vQDdPuLkOI0owP4y4s0tvoPhYcZgdalV+2qaojGzsRAgoGxfGHYvhfEWUwUwb6gzbNANV+zhGeHxOLBvvChFjyxrkyiKHz7uxKl/mxFA0jDPH5OU3Xiuj29bCEDDy8VXUliRI9SKkbIVD5SE51gDikoR4NhZIqqSzPmfap57/heaA0Ye3TVBq1dhPeoEXcKwxafg8GYDUli2HNZ5hk2d2fKtdAO1JTlOKC9tVuzPOmncikuouShorSpuDT9wwJVruPs7JLoybc5g51qWw8TdeBZ9xIFZ4VJqIbjV+0parAjrDNb2m/K9KeV7o1BvkUsuHTsvEoEd3uIOsfxtJV1w4tdQyukpurYoe9KhMTjSqVIoT66TRS8GmEtAb02kzqgZ5vCpPQRN0GptvZI1onacRi6C8xfd3WVmZ+v6c8m5jJPEuQfKgVeT+R2diekV8Q4qg6Qw8F3WEXnpwVbesp5C5LESL3vx6+Hrs3XuVGtxsxglW/+QNy1FhQgFkXn5i1zgDmb+TexIP1mtCQtu95/dYWkF665ch7W968etRzXn3THVB2Dr7Q3aAI30JDHjgkRcjsQ0Q0SFjPj7Xox3hIYdiuFW3cdtmEoyCtcL8TeNIIbHaOo2vZHonCniP6AKVzH3RixoMDtbxWVmMP7eXRo0uv7mGaNOgxVmZDJMV071GRlS9d1tVG2lG24w3/QF9RJmIioYHjt/eGznTZhG1vfwoWQdGTO/JyQzft7QYZ9u10szzcz7GMASdHI678xTQmWo/cgVzXn598wgCUNzHd6UPFWF3LCf/YV/iBiexABSvfRNcUIhY+S6D8XoMMU1/n4hPhxxNaGIASHl/sTEKILF4dB9vxCrFV73vykZ24VTzVy5GlR6xD9HgCjNHXAN5ZwJdRPNqqyfuCwz7f8oYxwYsdP+h8d5y0meCmjxoSvpYsQGDOADfkRLgXBncK9GGDvb2t0FVCC4pvOzAWyFHwGOcgV0+L2c1upPH5QakVdy7wXlR/5F6S2L4P4N9flUi/nQbZKpJL4XFpJtLRiSYCW6XxZDpBKmWYGSuZUg6S8N9Xg3MIyTee24MHXmBkrlW45bEd+rxegyl9tE9yUd1nl/tfXIuqQzboH1/p6um/TwXi4n2NU08zcHXzgEtzYUaSQ8eBpSqEhepfF3HyFoCqPCO9Xnu/kAb4gTUo2IRv5uiJBKcoOPVGC8deSf21g9STELVoEUVdVF0EWBpaU1RRe8GzPGk3wJ6Ehpmz+hfUaSStS6PYffsqUzGwT6cP9IwK31D2FWGCXXdsUadXj/Oz3Y4XzRkvVmDTel6m3fOEAVSRMgu+PWCNHPl+a+08eriuY4RsLZP/El/kQV4YMpN7DDYuy4q6ILCy9zKqIho3HP4PnIS/ygmtlEGFDOP3lzPQmg9b4bpmdLXsAD6spobpdurilxQBrV0Pp9V73A1OSI/vsCtxf3xU9rsirGMB4sTajM6L4hefQw4gZgjPmX6pN4WpI84q+gEH36ZrWAlt1NPIVrchD8ZWkInLcTAw//RIiVH8upZlQNu8gKeadEwsW9D4AWlKgQS8YDItUdeH1ZoZVH4FShA440052LhvoUEY7rfzkj/qKwwjuYkxAKfFhCn2VM5YhTkau2A4CFOrD0Ayc9aFQ+ctGuvnXW1UPfA25vtWfDBQ0KjWWsCZE8owFi5/+N+9ZOVE95J0hQy0TsRVOiZs/k+gye0OPGCc5QMtv95MLiyW50r//XdikUk2WkrfZTtc05cRVrFLrr4fmmT6t2crd2kegyar7jSqWZxBjAB9OBmQ8RT6PxJm9Qf+J1Q+bGzLO21CC1DhLPlukIziCMUiDNitbhYiFoJvkuYDk0g1iwzgL+LEiwZ0nhksWOtVMVYP+5Syu52oMLmIBYKygtQb7287gP9N59QNMjTEbKaVCbpLTcEXw/flEIY78PePuwrqXwGFvD87WOqBfEIwzAgVEs8lU8v95ifsSEcKteyMc6hgjHOtqF4k5IyG2hMVa/LBRCBK2j8ixyEe1hb9r656Z0LIqvXqTH4OM/So5XlfyzmuwWctnFmBG+LlCzina84hVSQ0tPwKCNjzOx0C0kyqg7MtnlQio4Qel40hGq2CwuVZcu7Hu1UuNgultRLX0eoUuwKA8qPQ1ASaYF/Yr3+HwF1fbeQwFT3h4mcV93hC958FekRc0AhMnS4hkf1Asm23HNkSzx9WIbfYWZMz+e4MecO4LGWeQ7FkG53xr9Uj8rDD8suo1QaxUkmjvE1cPAfoXZSKJMlKZuR/AlADPOspR88s327kVHGeGejTLBcySpEtprL3qWXyF4KIBdRz//5hvAinI7vSy2RLlKAhLpEMJEbjAXqvKu/ON94oNaJOaYPE+S8OUzr/xgWHNDRoLEbUmvaWk9woMudsJ36rrd4ECbyY7s9wDVjxFsvytU743tO4ImvQdwt6LRh43/uxsD5KUkkIYOK7fIbsgMOwdtQKflTEUk13GSLUX99jUUbGe45AMGF326ce2IrffBclH7VX49RGIftGIyArcmlcg9STwpLwOdKQRmIa6WTKsgOZEE8fJi5TJVXIeUpMD7U58Z8f3F/oIpSwvpirYzsm7pgCrcodVQmS7DfarM2hT3BUquAYX1dE7y8E8XWaz1C7DfSj4egOgBFu7RrM6nubOH8cdj8QW9BMRfi265OFChquSE466moUtPXamq5YcilsvpNTaTOD9P0XbFJsiSq1dQCkIaNkVvaPSfYQ4Dc3+o2QBjLrT5/7eclOE7Ma13GPtx+3x1UF226WWbdEqaejaIie5oLzXQaNOtlcRugiFGqLRcIzrqpu4bS3bxjMA6OZEku7EkcHj6FBlKV0aAzBjJCSOk4JPvE60mcKEpEIg5c7naj3SUWC3wMAS8hQDan1Vvo5Om0hM92k8+BnpSDpF35IXRzTx4i9gMcznUdKPnJVszWsOHYMcnF1SwxKeHpFiKNTyE2MBxoHSJX+yrK7Put5yLaAr8i2uDhfR34uoDAsBqTgBxh4gc64KY//CYllpDhxubSDVZEJB5xazL28sciWfoPL7T1qqSfUWojZ7rccwy/8K+o8JAjtymkt9nQuddWTu5O7eQLqNRlVKFOikaUMleFO2CCoeVV4ITtxfTjbR8pqw24eIEkFwX+AWoe8WeeHDwYlhqeTqFGcDMFTIRe87dCnt/8Bexg1svkFhJeFWDpWHoRq9jfwN6bEbVHXG2rVgNFSTZnqYVd3gOALeSYu3RDMZK9eCBSJ9ny49GY8DBE8dH0n2+X6mEMIZA9dJ06yR2lRpRJtFr6wP3TZ2edQAUkaiBkzsuR4AVdJE8RZ331xUSey7dulZ2f49Dy8Rzgm2TX9vjSCIEQkAZihZ4Xl8jDZlFSgTj1osDXFWNbpAHm3rDpeSwlftMBY2/QbLTI7swPGHHhm3qAnKi+28iVZ9tP/m0rNytAQ7Dz7jg9Lt0iXh8kxCG8i/d1Ragmzx99NWF+HimdQIX5Ag1vl4VB3KAcCyBiMTwDnENse8l1tVpaEIcgIO5tk4/+PKK2M39CavLkJ0AOnZsuOYDB7IoLcMy8ChJFG/2yCzu6JKIsBlEWXEYyBtFBc3ZwVFkKYbfUtXEeqYrAI1BlZbA18o56sSNOF7ZAbYDD/uzQ47p6KhPgEIcQY/t7JII1En6oLc4F1DQmTF4YkG9otSACK+YiibjBlh03iuQo9bg2h57JInKLuZKRqy7oTpPJOkCuPh8yJKW2+hUQtmbLL75WvxCagwuW9fNqqy1NB/OgqD7/15+CFjRI6/Yc8VQ533mjFzPG9gCPGQwtAo2/suYAzluhQ4cMlFjh8kUNgn4/hQljNtEIrPbofaQFOP4qKWoSzy9OFqOvJKKrBQ0LTQvv5uEtazlVAMkmM0IB8KbPo/7dyDSomfTthdenFJfEJsjS531Z26oD4fgzPUm316Fsd3YJPkpv37i8WQh05XU7d9KXhVb99dEUIGNQmqwbDlXUwMlvpX3dbar2m8HPz+upXlRiCQ/Gu9ADrfAjlR2pDMss6dqI9+C6mQ6bdqFff6ApHA+jcEbKPmf8w1THyH1IqAZXTQNUpBgVW6CYOyWjE2CRons4yKZNCoRoxdLFVNnB2b+gPRdk0KFJkGeMLwQmQzaE0yGX1sNybKWF00wuXYrEEyS5H/SX73Zjhrtf9di2iioHtEX6fH75CXta4PTByyCUhV4lgLYz0sR2wk5uokdkAzUJNuLSthv6q5S8YCraiDBy7HNqc9LqbRLd1W6S7A/ujZQXCghZV/0u3txCOweB4MoBycL0q4aaFEVw3qG4rZiJd0GoPEuFteFY0bZaO9XVpMxYERbEdz3Jc8Rsd8mcS4x4pSboyqLzKsde8j8Pie4H/DnpZbYFNwqQCWf+Y7XfVySKjB1wAvIDkjODrc3tkAZVB8JXpCccI2hVTSzFSsOciynK6/DCelwgaPCpDFxnHimqmfvKR0qEhPtOW3tUd6QvEUhhcqrAinm7U2INMipSPNS1koZU7IpDue1T8RfNW9t2roNQR/m1ZSIHIATnKoHDDyTJRDVrTRyZpj9N5TmvvPU5zII7Doc5npfXRexnvjSbNW+V2xNxyEDI3yQodih9g7gJBOhzEltHB5i2f73ildIkDSnWJDbZEgUU/9Wv3zGg21t09v98fgIL1NeIaM3IdUY1p8g534qntTrPujHwjuIdahAr5mD5HwqJv8gRDvuGUmbcs0vnPHbWUeU7Wa5LXnCIsHPLnsFWHvNo8GNFUMtFVXrih9xWtKAmWvfifuqir8a2LL8rWul0VcrZoNTXhtN0N1xnMkAL7SeRqXhD3BjZxmigmqZ54ok33cWlOP/Bq2bhfPEUoXlusTVTzI7l6L1cwBcGVaYeHH7l3S4dmhpDFaM+EGMP9yLT8EJkS1I3PEH1snikD8z2FN3qgC4EyeFvWpjY19+ziQ9bX62dqhsheSCJCbd3FxynxEkDXOUjAbGq2dGHGbhN7BcDpKG67Ni1h069tHTe24KQW09ABx9+guKxmtWKAr11lsvdptHGbNpdyLMGQjkLtDqx69KpqvmXG4PxaE1MVsBilMsRY1Ah3MbzVM0CbeBz/mB4S8XW86HbkPx8lhD+h6lTh5Gdo4TVg0KnJvXuImJyMEi4EE8VJQuGCg1LvSZRPUlV/vO/Vk21ZyceBLD1ED/Rqhtd/VSviom/OhV2H0qqnAAr5FE1wVkJhZslQ58ccKALpnJqDS6+jSoj8HQpEEm0NOKCh31wvIPYgW5GrPkMdLH6SdLugMp7O0VlBeLJe6WAE8hHwrSdnRlo5TAuLNlxHe8M/Bpz9I3+YnzDjYYM5sYCVZiOiZV5X8KgQREdQdzO2sgFBUcKd3Yes/4F0OsmzSe6j4kOA+Rs0UoEtztlB90LxkTrhz3vG9su2mghJQsXH/r4hz5KzdGwe0aPX58R64VFGuPtXP6ZoKS8hWJpK9f9ThPsTQeWnjaM7rmN86ZKw8TlM44f3oHijSA8lUStN8UQL+vgEkBSmhCy8y1/fKjzuG/9pqAgA8IruWJsuRLPMrh3W0Fsu+KWljxjPVFZW0NrdPTWc64OaVpwQzgigqGJBctqart/FFJUfi+0vCkwn8QhqwQN22qJdypBOHwPTubmhkKHFmpttrMUVh2tuXHGCUR230VG9UFiZgdaEWT7isKKOznI+tEiP5A/ZbBQMh2nbKUna1DOE03TwXtQIBaRl6xmzSOkCbb5A/NQzFMMKwoxW/LlSHMuUdUQzie4QdPCTo7tXCJxS4pz0hVL8JsmSFzR7HB3HVTH12KQ9+MrugsoTOKW9KnCQaKzLNCJ3Pebq3wZwvN8Pwj3wvAxKN6jXpZhidbhje6bLOcUoctGh6S+8rUyZM7vvev68EkL2sPd2lQ5ifhr29PawnnUWBSFCEX/49Jt7GuCaIKf4cd32V5TQFgGxl/HH+3375DZ/HmFwefhG1qcvj9Ja+EH5XKhxIPV/oMXKO9CD6mX4uR/0tUjhofENm+4uHXVitKd6+j+rgnrJKaxFhipJd0D4/zxAYNHoo22VDQc+KTqdzCZN3wNsTxbsEeI/FxxCYxS7ax+c1QOJMbk/Ei+dYJZk8BJez4ajb7HOHi6ggVWX6/Gh5LCTv4NyGmwtrSOw9XLB64YmZvsyZxcnmb/ZeyU588D8ZXTgc32/NQTkZE37T/NeyxLAmPfV+4z/wNfCXhhzf4vpb8TZeJTF78aQXFZHrpfIm0U1Rw7assBBG+dqJQL7ewDWJbyQmUVXcnMCAm0Wo0yDNbBbWxtvi7u7I1VZBUoU6SB9CH16rzIfiG23RJVjKyyin43sRxCViMnU+wt0kzZlUa1Ogf1jby26wjZbJV/UDFBkEFiKIFCtD7VybwmnxUG6yv8QGjSJ9VYf89yWyfTrupdb7/VcWknedsYrT7504EDdS5weXnUnwtYKjrcOTwUN6Uoiyo1CiFSY2XJdii+7dYTmOZrh1NWrccAVp29u0q9O9E8PqjD/4iXYgUWZqj2YhaWdN2vYHOjp2jlLge7kVeLPWdY6JNnDX2pJmyDZu/5qUpTU++endoD49PJ0MhNRrzlt2iaxIpjBJ7Gj1jrg8KDIxByIfHqqT1/awTn1CrWR/r4I1LfVtkcrMsHPl9/PA6zb5UUJsyKEKI8scilecorJ4VMssd/jOCerAryftGXLPf0yMfRn8xjN+s7BXxnwLLVCmZtgT8Z01uMmuOFcKZLLZSuZInfpYxfcePrf/QSrZcJlWffdAGDeGD7pGvC+h5Kf2/6RUdWu8bdOeJLl7MCMGPNfhbNTRu+2X5AnCEQynxYIyFG2S7EOh9QzVeNr060ILee6GcOVsPVNgntt/9ndVXLGi8vfzNvCaaqtcBPWyaIC8cMN1hSIoedp80roS8vNsvLH3vaTRPdIk30TGnFPM+DZ6nVhUCnTsropvuMSAcguJjlYRV14Q0SAtB8xrMFEpKr7jyp2BYYlhzY7oKVORYJtOdVDJc2eWn4QHFpCbGY0c0ATWr/9+8OFgiN8MsppHy5151owg0Vu95/PLrQt5HRz4YxavNf1Jl6ELNRE4OTMAY9PlXhk9Rc8dxNmlmkP715234i0yIi+fMlj+F3qY/NPjzy1hPxIp4w/itFEJjHhOIvyOjPNZH5a3srOw9LFnNwNYgKpZ2IZS6iJ3SqQnJ6RAVcVt3kdQE1rK6f6adnNcL0TJNlvU0fS9s4JMtkmx6i8vT3S+OB5Kzrjhp24JkMWSa1hqjo34zQyMxIW1t6e4xr8bttNNUG7yBM9anbJPeqW9+J8L9XxGF0PiwmpCuCyltXm0aGWdy0YVm1ooYFZtVuObzMJIGhvb7SmbuoTTbMl+57BrkXij3nY0KDLV0Qu0lBODpb4DGGgitUDwIq1pdOH/3gvLwU999lREnz2CXfwAPAxygnbnwhRNL0dkRfWKoHaIC5OEHuUm8BqB5k5NNANKogmcmFK00g1iK/VQukwVlxKWRHW6vRf3dJ3koJkejjgFJjZU5g5xdYj+8dLxV+hQUyeKFnT8oKliR919FLKsNbf59mYrQMa4Sr9InL9RgYwSSw6SHJ3qFrjnHBsW/5rYvKbNNgcnvlZalcpxzN4uECI6IeauSD5YQGNl0GwR8zHfDF69d11DPRawGoC74mG7b9BHIbmyIdtaBhM0asIg1S1dUeqfy13qAKSIwp7b/qC2YVFjRNxVY3/zVa0qqgWu5Ba9PLxazGaQrNDnxyRyRNZMBQnd8jkmqYPbxxDtdiq0XXgBBfKCFUZQhYxHUfO9TpH5UkUY1MnD5TKgsfwv+tD5ouOkOTkMDV6B2hx14qzo1j6QOxAz3eh1k5elIpduQqnl+3OhwbBcnxrqsLvYFUuWfCRDCJ7+IeRnElLQzQNPCTvZRDuVgmtL+PvNty+97hbm5xzYyS7sdV1Jl7z052Oty8a0kCsEW5LVL96aTGTYw1dTPIpTAdfMk6bp+6tIUQY6ZSN3bSeIaULf/Vmwuj9pvhogE7bKalfudd/zFUhhVw9W+Ehs4Cd3Ri5oGoQ2He7JGpPO8gPK44GKZUdHjZeNvKgXZg2Bqaw3leZCsWEXZeIu/0O/z/DDMQiDPRNeFnTbcW2PMIdq7N8iul4BN8IK/QyH2Q5g76V0zG/q20PhmvfOJa4m6jhqVA2nj1lG+Of6ig3y1bF1WzemYl5h/6xYzvUIYhwwezFMKTTPscYjossIlW54thOMjMWYuIZeNVqsDP5BYwItek9L3exVWvUNUaCGlUik4ULWQGtM70WulCEJeJwv0ZzpHU61U4yUo93j1OVPkdA+D+jXzPXd/knuosEU4ppRrmMKANoVjFMFOmk0IeeY2mDYpCf6qjfts+eI8KcZYJlyXs3I1Br2/jF527kcZeAxnXi2sgdv3sRGp2PiY3EeQDHWVWFIiq71w/QroLYImoIdjN5S98hPVDHEMaS9dQgvECR8DXCeKXktzqrHlJhrps8F33VRyxsF47k0DRf3XWwrEZKYkaWUN+eGCFzL73OHluWvxjH5NWSN/H2pYdi8CjU5LrNubvTlPQMHvJKuBmPaYagt6kp0fVSeVCysIodyapSkEAkuaEaU/ljNHCM6tPe5ZecniGUibXI6+urwgi6lypv0DpwrKqlVKFEGgxnFqUXIA/G8tYRA/dmyY++BOyQdjaOZJix9Z1bjaMDA3UzwK1obqYpuGTVMamdmy8eiuG0ZRjq02UVbfrAEfc5FOM6fEnWLeDQgfzbv5tFj7NhKIbTd/EKRSrf3lFPlROdHDpEIaQNlcgi2wBTebvAhQYsK0TO2aL6jlDw3EspXNUD9j+w01vZ2NnJZ0UNxtUilqZvh8wXFIfd8DSXIgT1kX9jALTq3nqRZlhzx7QXS1L8oc/aM6Gt7/DRWDyPUVqTmZ7DIRARgnPfPBMT3tK6Koh19ZDjEQt9jA384Ik00YToKrr1qBZ9OFu5nnuhmgnlFabeCoJbxxiwFSNjSBH+dKb+Gh4GlzU2z+yEYnxe/sC20imE3OpwC3rYCEFT/HFvfivhAM5IllBnoHXwZEa6+mTilFkKBIyrCKzyGuDSjfzM3sbRnopgQjXE1Ln3orCwdc5AsOsPHVbX8A65MS+CWeY0jWRd2jP5/+KdxBLhle5pTT/b/9uFqi1WPEUN2CL/ffsDejmotkpCCnIFXMGjD1kpTMI+zRD4JIIOC4L8keIDh+K8u/WrfTgoNH9jj+H86fo8mOWwgMnjH+uj6DyL75Rtw9iQ2TnPQ6GhFzq3b+f0ygK20WNPPAdSLVgwdGwM4FHj/geq0QeWGtSHejmW9n5oxDwdxIJyMh8WV1xM7RHfky37+RvNRZOdSelIk7jKHfXVO/yKnRaiYrA6w2EqyYeSBBr+5y/h88XY1rcqsed2MRs57mXIaAJPr7jEcbMn5GcQrsjsh60vLvut5qelEd0WoUvUdaPxOLdAMGkDDPE8Hqi58+YFuh1/mdnY7R+UHsRjoXt1EQ6w6qR8ve9vN7ZSL3BXuhMrtt8a9SUw3bvuer8JPO/Rg5pQgbU5nv5YjhDE72t8JK/6QHIuSVYgk6Xrxr7tOlO2356DAHFEBgq2naLx0aFkcc6fUFeaSxrAGb/73iIW4VafP3Y2UgkJbPfode+QlO6f28zbIuBvlpJVdtNBfnyILthdah6TVQ8+JTptCT1NRXx/C65ZFPngA0ki+7ctJU4x/UwvH32KIsy1gidGg2FK2JZNkUua199fD0OOjQgBOoPdsrH1V+LIQ8v0I+P5gdIzGB7IOO68NCTjiVSQEegB2s7Wp6xdcBRf8gGb5t0clOQlBKP93TsdcIu6jyCao62c70+fZZeTGkaKOdOJP9vWpBdXz5UgFvdtMa/dDvSznjrIDYAqgwW+ViTvhroIMxFeWxuB3NcaKc594VNN/f12lPRlPXBaGpc/rtGoMjrqS4tVwUGPtR3h8CjSyTAS8AI6EwRPBIrbR8tAEL55ikHcPGMEs0vXs0JSP5vkUkHbctcEJgbwUJaRMMafPXqFyhGYPpf1l1nEIeIokHVcb1TsvQsvHK78l5tb8Bsjrov8MNOJA3kfZw5ItbS7xHS+Dx0eeDOgQc3cD8Sc0jC1H9FXPsml+25CWKcJj4KCIkKojZFerSkeOfUvQ26Hk4ObIpTEhljjTn9b02eHb+k/Ew+fdffRCheLCUI87Pe6rJ2YlIQUWoZryci8zZoTZ6e3y7Sx5LJ1n6yt2mXvECRyzSWYOd4u9Waixuc+bh6u9GCbojLYgj9lV4wkZpjBxmTguU7wgMoRMF2PcfH5VmhioxJ468DNxJfQfkwnQgBj51VpvDNluZORg5aTVl9RVYI4lDzmgVPU7KwFIe5bAkfGrX+Ef3Fqz89dn37lmNdPNjT3eBxN/OMJadOq1h27ZtLFoIZUzBT3klEokG84iAE11ioiaiOqFERsJjN57DcDfVMOAK3tbiwOAiTRqcyIiCpJi1IRE54pQOINaG0myEYrv3Vjukrhv5T9gjjElv5R6qww6ChO4AADlvITvc2zxsTa1HsdqXBVR/a+9vjdlt5JPQ+xgZacLjmUDw4m05/o9uRivlTxbi3wM4yI2dsjV4jCqUbECtKe3cn/Bk6k+g5GhyzFbNHxRTeFG27jByspIxeRB1vkwcTPAAhAX+RsjWO23N3QckQ1/WOohvSdFX1UWsn8dshap6bf1xL+fnedetSJTCJXAbjOQGYFpgBJ7nj524eFsmpPlBPFZ/izB+GCDuinEoMoEYkNo5TXqG0nJkGpCM2+Ha9/v3mVfNXU55IJ7sbKZMU8N4MRjNlRw+vu9tHZCsv21EA+Otf/ihfXPH0/mmiBu2skY2AjeVOsJBrwJB4RtJM85vAQpx6aFbspjKULVCCRjcET7Ms/J88b0vZ8byJE7JpPGkPs3wTsHc7BaAQfVBHu+3VjhbYz5gLX/q+ib10fRPcj8hfAuf9phOnRaMMJ3Gur02qlJ2Dcg+KMSOU93QZR6+wiLQi09OUCQUagCAczttLRgJAolDRIbiO5soM91lb9hZLodhgOhS+2UOF572Jlk8hM2ZLroEATgoPvdpAFnYirG0qXp6kC67r8AT/eU/FbLSF/SgfEgokx8XSBFu4Oabhk94erjqJVk2OI3R30wasOVX4PQWg9Oqx8Ho/opCUt2+oqMn/76xcgMoWLzdotDOrkYW5hVMbuhXpj8dx/8/i5mQtRSMW8iccgfpRiYs8afIszNO22u7aC1AECnLhGRBhxqvCwGOIYFlFe61RkHhAplo35HxSxrB/S5UKmcFpa9UoOPg35kXZTlRcns08drddhyr88pnn7uqFkS3xbbUqoITzaqxB1C7P97G2AyAamWdmRR3QxfRZ9yWp4qTfX750DK5RGkio74lznW+KffFXPG7NaAqv99m7r47IO/tfQnUmpHLB8Joh1hL8ZXMdHgKrsBjYveIGiMILwUfDOGCXQb2MbrHvhHtb4pzeb5cQjFYsNlXW9ji8XhhnIRUl/v3rawaQAZVutifJuWq9FKNkZihJU8Sj7SsXdryWiAadh0BINKA/oTU3x+ZoL5TVHF5mvY+4r6BIQI/B18eleio6Ps3zQK5XdfB4a+4MtsxklkN+HZgot3A2a3Hym6dOYFnnZkd277zhWxaZl1JenkDi/WFBf7pB5hQHDV6iwIIgd1SbOA0Hbpe0Qw1K0Y4teycSm1QIedIfdXBYi2RNhw5I5iUC4ngLWcaUx9mH0xYqhDQDhLuX2THoh2G+zdEn7ZYbt0mDu5h8QPuK1IMEHmpgU8xCPIqoXF0YKqUHFgDOYh9RMeAOXUbEF7v2JGWtfmIUlJcArI7iOidLcDxZUAum0fX80DWNYL+q32kysehrEE5ioXIOGg1clxZ2iTpAToztzZ2cHtoiY8DAjXCMWc/TVz4mhpFXX0/6H7SfGvhfli/Dxqcn0czUcEhfUu2LG1NYaSu2vrp9AGpneZoYemz8ucoK9U6fcy2ek8ZAxvDh+p5hUYoa/52yX8SzSZu2u/dljGG5xSWLsPrzy16baF9JTaBYPPng6hf5+EgE+p2LMUUDHCpgbKM4Bvp5iBAQZMQH5oV0KFjM1l0UhFaYTs5eDLDj81O/txKcAKxeH42Y3V08IkYFrG/qZX6QQa9RrjWtaKUynoi5TQiV9EpDIPO9uuvYg+DTw/DLHMPCUj3Bty6XqujFwGI0T65vAAEE4DXeVV2iWm8YXSSvHjsijBXiY4gnkLOFhFa5WIEbkPLxhqgLM8LVoRLGbv0QqQE3YKef2xiroiY+thxZo/IafYHVUrrAtxx7in08LvuXMzO8ad/CCZ9BAsbuGfYjwTDerFaIolcMSdBAD+j0DuwNKYbtWapn1qn6SP61oohmdww4+UEXutxSYVGMAbgf6Bqm8nRyIvxT1QFzCa3+QcaH2YoaRghybNNbGhVX31QohL025wkFu1l5Tm/qouRvVIe7ggzAn1VbzmVEHSVSRPblb/9/bQvFPmutwgQ1Q7OUCH3bXj2mURWABHPEGrDyymHU55h8As4Cl0sVtRe0pdtjYFcIhOkbSbJDPYfaUpuTrXckoL8IOZngK4TruYG109ckrtIXaXzAW7r//sSqPtENx32qirLUUyiyjpZmziW8+Qj58JzvseIqKtvvaQES+SnBG7sltf3YnReT6A7RvIqK1zUzjJMU5IaibdE1j9EcDKDg+mAN/cBpBQKucK3qO8U0ha53CGQGAkQkE0IEiQhzCjH5oZl9YuUzrxgHpB+07Bw5E5nuRlGjPaHfgvdc6CEtgmLoZbJ4MejEG3UsAlnydCPhs4nYlQkeOPVo4k5JxvzdJidXzBM3YhTOhtnQUCiEIvFbEC3YAteHRxCejPbxGQsua0r0GpOQz7gXw4Uy3aqzA9nDmTmYNcDt9/VSDF1fUHlAkigFQcxBcv28tAaqES+aSd3idRiM/CiPQR9x8RlaRjnG4LmwnPEm29qXEe8eEqT7vq3oO6qN0dOWvKoX3TD85EDCw2+jifY6ZC/icO0PnEP0WMbbYa8ffLdBeTnyIB4xUGJpQ0vcvZNIfvhI5EHmf6SQdWWdZfBjTZK0F6b6VAxcXq5vSjjYTGVwdH28Doan9HHbK8bzF2ad9q5VaPDpK2wmgT0N03RvuJOr2lcFVYcsEWDVbxsLmEzz6tfznghu+6ItI0hueHBO4l4UlN4t4St1t9dX8lOCJV+hIlutZBPSFAcx+eipXVvoTMEd+YjBPW/l1gIx6TuZ+meLnUgxndWW2gI5CSmlNt8/89w0OlpODkumTmtcpCgAkq0Uf8okT3zyFiwCD574FSDUO8E7T061r8vj7j53EpL+C7AAXlZllxd8WF3YE/4pWxQ7uxhlOUHrATE54ggRle+iZ55118n+TNrhX5y09Y3jl1UYPzf+S6sbbTwTQF+sh+rKYcrsD93vXvMjmgUsQcYKkrqHRxJfYGdvnLoK7BQIK7VxCGDJLzaCxR4XRmGY2SaaYHWGTCDNT3O9BQVk1iK+mZLScMRe5HxkJK8taDsnsI3t6JCRJBAlYxQavYLgjP1ojmK1gSc1WeFV0JfE+pX6RrRBlyaszoWPsI/jGWIo3cxZ+HMzPMMqmjb6l/j3dyvmpGkOnTzZUQiBCqbtBLPLBsqTbWQQJrDSyr+kXYhB3rOQSCANhwl9YUaJzXCyYxFmgQiZy8WOyD8lIqZxMYLnNai8HeSav7YSP0Ajh2u1mi7ju3LnSh8+1Jq9KLc17+E+8jiR/01BEel5xo+M5KhuGhgXGczBgZEMSNZDJpqD6Ucbh+AJlLF2eA6SjjnRjzRXN3efNX6rtiZBIuFn2/esPh25iuECmwWZJoZgiY0M4CCKfJBRyjMk/YLKvVTugwuP4/btpYEWXzE3+242fCLrckQrozY/Pew1UK4MN2dEeqAgfPD7p3mch/jk+NMsiY5jY8blXeiiLuY+ResdlslaPEBy0aF4dXgIxDFT4GEhPoLhIMhPpZSEjTQqogUaz6ZebDiLBKoCNjvUOKvfTWcTmjmhzg1iBtUbbAAsyjJe18oouTKkXxXmNQEirTodPFqyCtx+bNr8/LUnOrkTl7s1I8nc6FdR0NSxRmlkLiMENASvpZ9sDS/+rrqArh/srNs6J5qXt3S0HoPiOncbaT3neSN071Z860dWZULYxpBVrPCNajQgnx7z1W/8ciKJDJ0P6DB/jPZrJ/0JnMffsnxofM4CE6PofqHrWG6zoLpDE8glpCfKzW1+H161tIzS/vjUqj/WqgO8bM7MSsO7ttlUhRIgVTy/dPd2u2AreOGQQ/AHdxu2mI7S0LoD7HKheuCAV+QjVA1YHchlpAa+S7KACm9cpUWfMFpzTkb7X7YcpVBTGfcsoR4xAsEmwuEqRI2aqu+LrJ8Ixf1uSOvmvmt2Je9gmt3Z0mHuiyo9tQ+0rXMG+zq9wIofI5GMddobZGai/N27/pudv3rywep693KaOYRIkqO9T1RI9XbcE+lKNXfBSBkWfognylWNSpx/vAT8j8op3GyvBXXgI6Lr8z/z7Utq9aqN4UV/OpmYsaS/eFz3srWjF3niYdT1r3lNZ4dM28IOCocIEAWhMRzl/VCf2afbV/8NU0l3lKJ+9+k1QwbFg4THlhCKwoUTzL0BA0D7J7LPbUT5zikF5Pmo3rU7tLXjgDY+KWj/xLj8gLyd5imYU/708P7kkWljtIZw8LYwy2a5uG3thYPlkSDFbBAkbpi7slPaNMnulnnxwlbxn+AN7p4rabxA6u9nC8MzQKUGRCp0zyTcsOyDBqoPgc8Iyfh6ltQq3tGWgf3WmVvtQwGv+s+NQey4DehWw5t0Nhi9juW9sLeWnCV1jSBLhbhcuFITMT3n+a8tqJnUKAIXcHapDKEnm5iAsJFnHQ4IC9OLkZ/yN33M3cY2Oo1PEu/iRoQECh+9BH/5j3WwQMps1tdkv+rE2ihaIqt5x9NNISIMfv59r6/3mGwgG0rYxCaTcnth3W/D76QGbdH6/48nbY/Ax0gP1gktiFB4QJN7xtPjXI7GrDl8TPbJ3fO4nk3afFiWlvpVQ35DMkSCLqsygAcmBQ0F4nYPGINcs+hsHpIKA8E800yktBIm0fCYvE/jvn4fVw6d3hs3k2wxSk4UuoCYQGeV80foMHeeJ3AmkxNysVFnW1Xx2mV5yLSLtm2Z52RlyAOrfccN9o1Ekd9SVIzpaNNAkM9rMTm5C5qlI38oqZW5Hu9r53frIqdIthLFtqA/beVCgePuIAxpkZK9HLz7GqjC0FfUMo+Sp6ws20fNocwN27hjcqYqC00XTGvAOBE7EPr6Hvr7hYo1ZgScBnPrgHa7glnAFEMMNK+cExHYJVU0Jv7X2Q2b0Q3T6z+7tDsiv4HQlYqszyYgOlc55k7SZ1It492OuAe4I5OqP9imOA8T4bP1OM56eAwNJvHyuZjJzJxhXYxht2Dxyz0jNUJSmWuKqlFs0qyPtW7m1YmmGGBNbURcOEqYwNoEWK5OTuXNaPlp11apA8kL5XlyRDqyi77YIstKIsd5LddLFpeg0hk68gzChW+c5/O0n1xXXNRGYjk6iBdXNEXNl3RhtTM6oU5Vj08GUO2fmYjUFaEiD67wxWVzBU24Lfj0EieF3qTHGlJIftOXrvsk4iaAZL7DFLVEgdAmrEBXS8DIJATgDZCYJa/sw7We1sA1whiwnI3G+PJX6IgHg+5IJLkdlR1x90QM9/upLittCztb1bHxRsJ3OewYaVal+Svgdq3CCHTm1lwaKxCKA+5FIv5XoHRtXsyI0hiARYXrQN63dw4l+z1mFZIP4FrHUG+2WcrhFxnpMvNujFzIqzJIBF7NCRzw5SgzdAeIQ4Wp8f0qVZwJmK6CxDeI1R0VF76o8TEp2oldd/4SEoC7NZDugUSOpxa+7lDyCGG4hy1IKda8FsqtzJx/BgVqu2C7p0ZDAU8lwzsY6JjOjdPCEYBF/kqSX765Au2/l0WlqaUK0Y99Au6s/ofM78GM2bsYamCvTZ4SoKzZE/2W1CkqcoSGH9YHCPCIepNmDLAhWRlCTgjbTs63u3nlW7vnJIkDX6kr2b1BOPC23ijTrLbB9JDrcItj7P0Vlf+n/IZKoX8blXTSjNDfG5ZN5fRNgXoO/J0tF8McOs+LhnUB4WwmpofH4zVx3EMrYZqZy4Nr+OQu1zxe+ny35mu96pkuN79AMzaj6j/uKuhFsGIBaLsS0RFeYH05JwXCWAZHKQJb+8R5F5rKUO2FEAOohZkmZAGuCwIhxF/F4XXIt5Xy9YE1+G0hDGgctw2Usrr/+1h2zKFrfoRCZV7j1ZROxjphm1BnVUXp8dIp1UVjk0EXBO0UDCZzF19judp925gUE3VHYwXQw9twcNRr+/Lq6bV0HuhydGwQBVhD7bOWOCPUZTeOOVzDWx4lkibmm+A2urrdwa7fQcAKqyUk4scvSW2w2aocD00DfTofTtPDKO92Iuh0twuUmGDvBZ16B+e3r38D1iH2Zm9ChNuInuvA8R8xK4ZvmLzmzNxY45023RyaXAMIcDJ8f0U3RdHhkLz28u4rvVDMzw7x8blcPWVWe5bTqrBiRGGZeTBZmugCdkM1TMfYOTyUJ+qpa50QR7aHhAIrODcYAeBKUkvoPJPhalw1It8BRTd5VZ3RjnrMrGC50Pn06+jgmf6/2Y8HFObNYMi2EebiS/8hxLHrlyDPnFkTB6HfMBw9HI2hK29dHZzjxCrH5L7UXzj6EDr7ZryTSjkmNa1pdqqc2cdyksFSnKe4LNF+lUVSvBAAG/S+EFYknP/HZvuW+84BZgsk0pbpIqUlGFDYhiK75sjg/REEqUivG/ZRJ8TPryPQ+Bs7/H5B625WPCTe2C00mFmtN9w76pBcp3dQSggH/O/9WsR4hYYH+qdo+gr4TbVhtk6gFPU7HV5ZDASnJEUTOnRR/ULK+xmY8JbYa1DRhwBQThH7eSteyofIyDcwIBd4tTAi6gXPfLFOR61rlo1fguPZnVITmPSMZHSTysU9GcZ6xc7nNS3mma/kz5NwEpj1fW/tsW4MNoHOHq4JdpSVjERMLj2sPhkWRomNjAhHV+RDy2XF5fZZ3V+rLAHKvGZr9fxa10DYXH9UA7tSbTyrVrc/2Yr4w+UsIAsmrMuGxqnataN/CQj2tmzxJ7dsJG5t0r5OvjcUJJ5Re1ZsV0yxtSDHbOwYWUB07F56EHTANaUUR3rc5qwihcqMebVOa47q5kp0kG1iyWg0lDbny+7llVvnQ1xAXX6dbruThMTJc2Tuv1wizKdSZ6mvL2SCmdFilsFO1rvJvrDY5riu+vpN683210SA9bfPlctjenLfuho1xaVmaXI9TKFQGaSL+wr8nE7mmrUPofI2xnfT1+ktF1IoSd/EW6f5EDu1wTEiftqBpumTsYmHTCF9UwSDRTFs9T5Y88f9Xgdau/N6nWN5rPVj4M2mwaF8Ucqix1PdjSYwsAeZbBSkUhCu7O/XdIbanN09sMoSYGoDZ7RglQv52rFJdDTLas8NVadQLH+2gdGw/dtcZjiQcm4SgRyGm/N30ENZlhurtUgPtlU1u/svcwW2P8DsypZVTWXWMYqn38vKiJi6f6NdxT19wRxgjTh7GKlcgB0M3KOMlucwPOZUmsMG2D/16wZa2psKKdpH/i6JrLII/YCAZTOMEc4m/4YfJVHcv7gfojlbF54KP9sJPhiuRClOCv/CFwz6jwc6b1L+Jn458aqNAdoI0C780W5/x4JzHB+09/27W99XXGAU0rG+NggPKQEA774nCkIJqHeNNY6Yan3wicuWM0s9nQFstxb0ojin46Ozref6ZgBkS5tTL0CYCjJiYm+DEv7z2XYP/IPxjAxHOdpweFU+nWBs2plMN/VyjhMx4OTvKF7Rd3yOa33eAp6HFFqb7+283EoEXgyvO1t5Cz76YM1NDDMLp3MCZF8j0IBkVd7Uw3UrL3pfPrN2eIt77tbvz5hKmn+RRJQxJIRuySmUTnQSXC1ComsQ8iibcmwD81xEafoy235347EdILXBuQDvEJN6pwraV1EmnhOHLMROq+UE+aS1sX0z4N3nErtKQSQN21rN3XMe1mRu/UUOlGiAhpU29m9cTKJiC2W8b59upOvv12/JalzPNF3esj5sVNA5aCt2h9arS2bVJrvcbXBg/zcqxHoYcZxQ+Aohi5ztW0v65De5TP2jqBwzePRk0/3DEAhth3Vov1ejRqGw8qtt5hqckgj56heKyk3sWU0sZ4Wqjk43UT4gj59FotmI7vjRhv+pjV2rXQGPp5DAyPg5bE7LJ5P71jfn+X7Mp15L3ihohEV0bPfFar/DKbrBhFV9NjD6Ap+5gyvEaeCLdAAyBytp5+wSuGpD/RqzrjDQlcnviCkfpB02YTDg4l/km9tpAjxwOIspg0vP3jkBrIkndmzNc0nYP0HQvmn7386BzSvd06gLTn6O5CTVNY8zqLp9yiyN7XBQHjPaPikGCtodTF7d6/rT4RFid6aF+FvB0Ubhw97sWcolk3ukSyXp0LufRDCAswF6zNQfeagnWElkrMtjJBfH/WvCZclt8ondXNucnNk/3ziG6MvKoC6V6Chl1bJH3ixK3NDGs1Ba9f21V6O00N7HIXeopxe1nSiADoF1v/tRT3ZJRleCDgEU8HK8WoMtdQ+kKMO/h8HbwXchEjLNo189AW8n0kWwJHSVhfOXDeFXDcfBy0d40LGKfFTzaO+OyLFPilmOxB5luREzT9moh9j/CEI6TqYJRZKrUGPPfs2MY81BYccORqX74GFKVlrBs0CWCwz36QsGFgWsN1mNlsXUNN7Z1i1IJMuNlnq6FqsTRNMWJMqbAMD7QamnSL5EMTEUgDNosksA33KZDpDK3JYARriZowlC3Yc2spMvjr20R/xDhDKGn574V3oaOHgXFybgbMG5LZQ4tVFvWNT6LKgBWAwMhA9AM/zC1zUWvYms4EgIROG3TXyN54iI+llVD0qGIadUySFk/3FjLtx8BZhhoXdPRYf1Q3qvgYkjKwyZwxMUMGTyHXJ4juwsQXyM5WRZUo+uyDw83CP039z4Wi4SMvYv/lrcKbMA2IMmWsn3jXCf4Ux+3zhvGn4Lg0tMPV72RRw+e4FFWcU4ac6OrfJckbP/JbZheu/2RvxXG8yoN6JpJwb+ilij8zhg157l9vWcXbJtNjaDAMTG7p9mkm71P6YbRLOFTi729FtFRv331/Td6wK0MxaAsbLcoMP6E7oE+gnteNjrLylCXUyDswAgDcFjpuZECYFbGd9v1OBO3/aBRSCVUhaheAdQd2l/AwyFDVn64eGA74Bi85SImH9HBP+XG2zocoN79ygPReUX1/armsL7OOb0IiYN2wl3CvyD2CRsId2Iy5UPPiOLq2RqE4T6UOuoxGD/XJfaBZxuPxkAs1f3t6oB/uN23ApJdjb1p04UMDJi5EKfnmp1VU3ZZfpRBfYG6X36mUC0PPdl8Pq7O6f6thvKnc9Js6/3O8Ptib7emakwBoCwVSigBhUm6B8Wlv4Cg66nJnGVuEXgacA/9erM/us8TPtENLwLb38YXlq7CR84w/2UGw81F2ILfMixbLHmRA9nuQiX2MFgAA1nL94G8my7rJR1jHQGe6Zw4pWcHq8MNKptyVxJklpwWCTK8ytqE+Nho7o6JJV9v3QtuqgqqMEoOf095XheHsQK1czPWONLl6pHRXfR1GAlTmoSVcopNnLK3kX0JGZXvpoir2qI1S1foQ41EofUP41HBAQO069G5w61oKhe9dUbh2xBt0LXdLuA0kNlGbikhA9QYcHdxNlcYhGBxJ+39MCzQc3zku5o9BrE/sOF6zQ2P9FOWqPtZHK3Pnm+JRVHqMZ7f8MKzGbzlfbJdHng5DW3wwSc1yABLzEPNjiElqLP6GVNJZNe9ph47rh7/GLjqmXRfhdbSJ8kXTkLVUvGc+hGJPP7cOqs04LwF9RyvYksVBWBzNsJRkb7HrrYpbjk9m0MI2mnRTZ/HKqbgHMoCH50B2kwIfHmKZjgGCgI4h0w/At9Udmw5oAJKNcwXmsPIawIWAkKYUA2IiASss9lmvrGYoMH5WmJDLrjnDpXuoRLFT7LaFB6hsDrked4bgDEMh2unATB7OL+vyPz8rY7SIGT6INpN4yqYpB06OeTSpzjhfnGmV9gbONHK9N8TI1i07vf1avLeKXDzRJRMCG/8P3l7N60QWwZ/le4Sv/CmzKyp1Fs9+P7kg1YuF28Tc23wQZf+SuvWEzzfW0BePSK2RKfzrLAFhHSkXekQJRnhJMztUoAm3/Nq+nn5TTFJnU590pGIObSop241u2INho2qgX/idrv4sw/9MWdRwEak4j0hIFD6hmGyzS9VtzukvYQcnLWap0hzvQiqL0y14bVjh1crIYq8pbXsdXtIyHyVSr6r0YMXjUUgAUNsWMFOVmzAL+UwkKvEaOhDah2/8oAzkUjSdd+XvFw1S1YA7FrjckFyvSZQrDi2cboOD4Nt0Jo4yiKX6YGTB7ExBcY2Gl2sOuie+aCmPPrN1b68ZoJ/r0jqdit0CRlavGX2HFLLQ8YB0pZLKFpQF4bGxLpSrpYvChQQkYkbvVG08PujA0TDqimH1zd42QRwZqFLZbx4lNf+FhstVQSEgq6MObvPNzQXj2/bQ1tZA5BTNbXE0Rj3RXGXBmfeQAs3CeL3fBIIWotV1t8hoAnAxUXfNxnj6etuEnvk1fVS/8J2VkxJSp0GxJCCCl9nMvT0GI1y2ZNHYn8MNO9l0EUBNhQepGkWYPPgxZwsNWwRMrkYT38NJFD++2Er9hEo9TZfReKNrzHuTsXK/zImzdCV+Aqk4JdOuHKPWMcGR3w7o+UBT8swq7nYRwuBQTb1MDQTNKSNklYGy86r1RXvdu1G9KI8HChr0aG0y2fQo+Toda/5QiMNySJmrNtNSANSDMmwvaqhyJ3CuYlnGiLLO14rvQZpVrb8YmEk0w7Lrx7mXtxfQRAn3pnO4Poh5mdJU4q4Jm/pQxKjgqFeiMxYQ5ryV3xHsA778AJUplLJrELYv2VK5G+W313FXbnLl+K6VebLrvOcSTrMjxh9l7UeSgJYxUyOWR3yLApmAh5587Z04gnAipW4OOzfi0o6NGvjjIucB7Mr0B8Uo7Gm6bqkCe0h+yBLC9o21VmLn7MHqTO7vpBV8HdtWlIxu4tpIz/J78sWn1xVRNVcpcSopCYLLzFu2DcwvY+Bur6bKY8Newsl46RjLWd24blAQqu1b4Pu19MTk7fhztr32hmaZMu8txUfeXWXpgEl17r9ZxV/u42mWF1XoEGzIwRsBw/gjnbOSWoCywr9oPPmSuvpJnuGqyvDqbPcNLF8cxIp+DTZWgDJ67mDmXmzrJqXfDW9hX3YbRZhoCGAjs7Kg968gnUr8pa04gcv+6i9lVSR/L3wZ1sqrkTwU3e5LZch6mlmMf5qsB7B28ZHjvAs8/pkPsmq0dsX/Z/7Z3x9jSKyb3nOgCdpNvNl1Om7weAJ+oMt3eAY4HF5VQK1sYVh/DHP0PNa4U9W6OhYBdd3E4ooKXO3mtb/b9ANpE/8zhBvRua3xXC4QHJ3XhhnxfNMWMIEiLcn7xl2aRtx7qmS65blVZyzUUVDUjRHIZXRWt0vSJ5JSRBq0puV/u1sBeatrbbiMuzwe0TyqZLaLZP1bi33M3nmENtx3P8aI/CgDOm/FcRKRoPHD9SenySNlIXqBo0jw2k9M0ITtBNnJwt3Ll5cYocUuuwWy6H2NZlyVtVRZJwTTspHrstwBdqlbIXH5N/86L3V0S+qbwJIzt/ZLGtuqk0oESFn4GPOpPj5lQOsLm223LyZIXh0m5znak8phMk9z8Fkbe/vPmgtcsu00OOTlsMdyus8P/YI/1qeqznvN9QhabRusydH6HA6WF1umEJ9V4bIJ1E+oOMjTD7A04yDEbLXfUXStf9WXhDVFI+IR+1htKN8pIgEVkNJnGcR/KOGmVUHJauBnidRQknBKWqugURn4h0QcKqDDDou8suoMVfdYtdlJ17OeuTsOKwnOS6AbisKrPeHu85sToBd7xsZ4JhYio2mJ6hpPsFGQ4UfUpl3zQeRc72QLY2yhzITCMX8JvELnwCJphl3FCf/5rq4xpJsrd4XfJySIJwvv0BSnv66x0TkWi9W9wKsCVH0ouznXiK/fj5NPMsLo2fVwhXdt2oRgTj/2kVeD9c+kOxjbbheVZzIgL2VbpvCX5gaSwmm7zBy+0gN06bVbneDMNHrh+jSLHtqaSTOTmzL9tlyVITkGHSK7XqZzLc41rZlgdeOijRby7LZu5+g5s/dvXuAt86znAWZlyXrOsHrnJY/NjxT56m69HsYr9Gum+kYfXtgNKuhdo2/qHLxJWH/0dtoYrStoABLidV5GxK4HRZzmw41p/tzeEgJah8T7nctPAgUwsVUnpo5vO6e/13Tzq6GpWY1xoKAwQIzwGSn/2JVqTQsTFxx4Y4U9ZctlseNvUg4HFozgy37vSfv5KcIxNONo+4jfgW9e2vmdROmhEij431+JpymzBqQ9RLGC4b2rIhr07jYrWhpy8QvlNC0kOFs3iDoZU1g0pOswp1ylIfkDMNeMzHSRmujYTwfgSoh6fZhexlzLfwbWMEOrnhuHYEUNFvOFsnt3MoI/ssPzvTI3LlIJ4u4S8hIg98Bnmzq01MvUFaw3I1GACxfP6NR1lLOQ8EM8qDoaGM4cw9Ry3+5UmsVJYCnbVfNkPBAF3RQ1Eipzf+phs/trtkrS8JknloNs0g0+T6jUnVqGmLMTcakLfGjXR/bHSE7kr2aDc+qQe4wkR7xxtDQ+lBaO8Vu4OOmhGlHhpInjsS/9cMmEewJAGkgJfVXLl7UQ1HraxzZsNyZuXoEVTfHH5pB/OGPT/HbX8GaXXM1EvTm6e1VO9bwkLtMqWnZ3tg2khjG7WPhSa0Kbz+ps4ZG+HG85jMLycisGsoxmsmL4eztuh8Dn/4wcazN/RLy0wara9VLYldNCdIqAP7kMHJk/gqM8Hgo29fDg5jPpgGsJUfdEfPVDs4PhybQCrMKruwfhXGozNXx3rPTxpAkHJIKcm5wRHI/wL3T2Ga7O3BAvZObqxkE3NrVske060THFy9VKeTmwWqxgnFXJsEnQgIMTq62J//pF46mt+pUsM3VqNTuidWnAjj3BxZw1JxX3Fyn+kmaepSVEOV38WVOp2GUKPEGGPFU80s5/S+xShKVx2TJy7ZrHi33h8myzm1yUjzSE2oShj8ezV/ZIXe4m3xUWnX+rDKiIv71a7Vk1nf+l7eaqhosMkP7usOSRpOPpIBigrWffG9l7kSEEQyjb+R6Kg6jwBuHgpTGa1Tzvr+n4KBdB9EOt8i0uPocas0ezpKCCXBBmnmjBeXNDYuv+quJXC+FaFlZ078fAh72hZs3FKSabEIWxFb4wbbFQPP6WHQGWufHyGtYEWZ83fhmyUtPN29Ls+djhcd92mOYNUSIabxwT7IEnbMfhirKT6jirDs7IkR1Ef1j5Px7qsCmQAN7YcisoICUnNSKpPF/8w8kTD8VJfICzG5RPrToFVyvu6A6bkgM4tXs67IeKAaZrxx2ckS/1VvDsbJhyvJWZSMjROedF2NKgQy41Cq/JzK7e+cPXWUqDXvH/W904eX6KC09ybSxP1me4ZoMwB93ZaLX/Vqj4htEanNcdv/g9TDxlWNz3rC/lsvbwC5+l3fH3U/yp9ijvuLXQ64Ar76p3lcgx4GVLwe/aNfh6DxGPImH1Bdxa+IrvtQ1s6jYHkC9fBkXH9Y7cacA7i7jzF2ljiBgRsHnB7C0rs4fhw+ZqbRVJL1wutySoMS2+0ddZLz4iaTev82StsO7P2wPiocLxdIZXR3lHOKkUl+8f9r1sZUc1ibkECQ6KMUdfzGD4sE0JbmZODlpJ0cmYEo3g5/mVD/HOKtezXqD0U4MEn8c1sV4LDYEL+JNB6ttv7gza09RQCOwBtcnUbarkrzcTWoIiZmarFg7s4T1Kw5nN8rpo2JDE4RKzUts7wiVqIpgQyf/bi6Cr9bleb2FHpoRWMnFCbQ4dL5fj0i50OdfWM/yqcEhqAUad+Nn5NIEr90dpyna8nOqWmLKdiy6PkFu/Uj/aPOV/Q/0O6C9SPHkLDA2x9mqRnVew76/3qHZKi4IHe79r+fTbFkeOdrw5gCvQRuI2/GZZi7teNBZBzRyNnxwH3ws2x6IwlbZhZr30X/2i1Rlu6v7IezQ9hqe7KlERlcuaC0hKjfLlutaLmfJopcGADxqLmmj/BydkCu9Kd/alWtojHlj8cqelHa9OJBMQhVxHNM8NsflianrmKkl6qvQyMnVqkU3w4TuGnzeXZAXYTnF1G3hbai4CH/n2MdE+BfKKdAPCtZUl2ppZQqonL6s9KwhNdgoxWStj1TqCzPCOnyrJXnUXtZWyOe/X7qz1YWLVGlQlAHhhp6yqKrVhg2Icv8J8/txVXRbEoOLWtbkP/aSptIo88svZme7QvR6RMOTlRgr0S/PdyXGum6BP0u5+zCJSLr6Vzt08M/B7BeZ9Z2f7no3Whn3DFK4wc7t94ljRDymrmwK3+ezWjr2cFVIgCUcIjpSw1yBQYOkySdfxvYwyVR4nVA58HlHwKWvv+MUjTz2GTvHhgzvskFCuwupIZRNufSRqBxKZIYvlDTuM9mW5I3IA7UxQi/A/g/oh9br9YviZBTzpxlzCYQETL43+tltqZyMUFxYbimATW429H0Eea6Fsl3ZtXGWYb0Y6zBf93r1pmrUnRtvxfQooKFGDVbPR9P9D99HWic57J3Zo58eRqEdB0LABcCwMiCp+lwYQ0wg3KJIl5h2QBIwI4LLfHCd6jN4Rgsd1QDDpcgLoZk6M4FrOXTBmZ8pMNsqGYO6kubbCw424TcFGo8tDnQtF1Nulyeg/kBZ1VrsHMPCWgRL3SrXke6kBR0I4x8M8xz6trEfWVhqBIMPieWQCnq2Y5X7g0mG/8aJYLcMtyeQPELx/LKKkfXT34NJ7YklAyC5Lh9HfNnOxpZnvvrSmPnwAyZlPRzCgSF/1QbM8m5XOOgKhaizG7tVUzRBi3OVYE8JFZB9CkFXffKJQMbI/vVRoseGuqkt7pGGGg5+GzPdAqhHrAn8C8EkPVx6DYcdxXvnQ/MsuWixpdG5M+4ESrK+F3OYmcVsINjiwaXDzkY1M+wMZ5J8hVdc48Voge3me2avSZTuMXb6AJXcd5og71IFFwbHaoA4lLqOCaKHlNBJKijC0cYiop4nQicml0M5+fugTC6nUd4obY70P4qO/GsKY7t3Ppv6Rx3ajuU+NAqIImN/X+OFmjNGpyODyUKp/0ExK2iMKN3vFNNcrc569P4D6bnYbwb5JPpeZyYD4Ldovnhit8DXHqPcgg+egJnjfMh0C8zYSp1wRxTQbAsiB28692ci79NExd1sDMcBt7wLAE86CqvNiXEvVYrqYwo/mDhClLRo6O08Tfbeg1WvI5blOSe5W7Ds0jfexROZH9iNYA3Trgmojgk/qGTlr0MH6Sk43jGTb+jkNXmsKR9wm1qbj2KQJFmKJ+e0GhOdYXGOn/HjTx4Ukaf2iy89er7rrbyfiChg/2pQ668eq58U+tDko9KoKBTQdWlJZd+OfdGtDRUZ6uZfkNoCDYV4O6iQHXpRY0yPmq3BMMCZvpcMdLORI0RzyqxsyQzRwdfGJW+0Hoaubuhv14B25AWiZTsFNa+1WAXT6gwYoKNmGuI66h27mVbzeCNzliklyKZR/ZcCyXunh92EMsR624teW7P/AsFPFdUx3yjlNCUsvU/PTkk1De27uoTP0mUohf3jgjT57COW2Bj70/id/QVfrXOK+xp6afZYxm84QgQWR+14UBBNrXE1n1KNz0nn0fPXcoYhFd7gySouRHKDEo4AEve3pMqj85uW3rGbNFu+dCDq+dybIPyhoaUK3w1PZ3G1UuviEskgMnTt+2Gwayt6RhtE2V1rW1fWZDps/a8dyua3IEVd2+MpY/ZN5ln23z+HjT/xEl5omdp3lvbIOWk5kdYhLrEKVoGP3sXbWyNMk2foG2gFuVT6tfBd0eWKKnE/3+rYd6wPKUzGiduCTqTFaZNR5ay/gGRVLa+wYTY/6xAHrhfU/5VLr6uceBSSYcAnRR7hiwiqC8ISdA2XEfQmeb6NuhBy5V8B6bkOQPIKHTgOEQWUolMM0koUmt7lR8jUJ/+fLqS7I8NG+PVBqqDyGqKoFK7UyS54yuSEbO50ewqqACF90O+tkzB566+UiIJwxU0VzYn0A6aAKj+BQvh3e6f6cUZp91U0IiA1BjFHI2853X7jMBwk84odDqnWq/E9xFdLK9nKa+4a/Ug8R0mqS0BRnT7icvTfZIFVYnBRtvJr2i4REQX2hqTqbdp3tylnj+oGrvHOzzZJ0WHzObzm9jFQLA0CJvTztJnmf/wSuHoWHj4Tz0/JNjNE8iTNKO6NebQXyw2dfvV5UQgNpZJRZFD/s6gZ/3JBCtkhnDFGyABCaHmDLd+MKEj358BAH3jFSYv5/yoXMieaYtcrdwIN46HOyv0s3pfblOdaX7sT+SmUROloBLEMlwRtVV/vsrmz7pX0F/Q4IWvERMTFiN0DVBwPbgYx1dP1dAqeovxOo1wc6kTy42EPtagVqfaGzNq+TCaTGvfkeTDpk0QJELzhM1dNF3T7/ipDI68fF07x62aWSL8en8Asr3irba1E6/swIxNI4WvVoGsCCWcQIc9Ekr4nqQ77Vmce5wswmm2Q3/2Wx+OoI3di9TwUuGFt+iEIMOjcnCmwW4W04SkiQWSoYMRtTtaOIQ+MZM1j18u9UVLts9miScbE8vcAGxV1sq85DuWQdNwBKw3ecT6f/WSrncwFo5cwjxIt5DBPNY9ZoqaUUkgBZB7Ww/GTlFmGIxNOhGRS/2VZNjp9qsDRlMr0RO5TT6V2+/HsF8g0V2/tfyZs9zgXo2AjxYdbl43XZZuar5pRozMXmz9cEbcDENl8vE4Iz8gWeVzfXezQ50P6WXArcxhRr29KGoUtkSru1SPAwV53fLKVfMvO1pSsAstU6ESVvS4QKIPQqdkA9i172/kILJ4LGsTFrZsD6GL7bsb8EDK2gpZr5lLb3sKkrfu7uy4OI9zMTxEIHhBcvYNrHRWEXQgV0927Xel1GJs4Zjw6wjvuUZv/YtF2S9d55k6rjsLYQeRN0+fJRowTK0hoPv8ah5EtXPRIBtQPYLnof8EFegdP+eimY29QpYCanJ2l9Zna4Oh7hdqzmAcf71uxr/9RxewIkFLO3WIjq6a8ShBkCzPQIB2okcEuZZvFlB3gzsfDQdQzHRoH+HzkbK7Sy81fZTsGt3xuo3yjByGIJwewm1G6mF80Tv3vXZQhO2DvfzOTjFKMeZNUhN0JkvmJSiXcfiAXsGvA9wl2UxFlDunRHnGhkSQfGor5OQk7Pyyi8CjkpPrgbvoSTx56suBgbzvxq3AQyEOiCOhMzBX+lNjJ/WnSQo4w2cGKEnuMpqV87voRYY2AkvCh72gMsFtammquTSksxIRb3dxpnLfGUbbQ/TxF2PHlr5AEMeVLweJCs3ldniPblc4MBy6toyHF4NsDlsUJaFszRto9nHocDjdG1cROytX+YkfOD/UISkud0FYeNrFoDZnjj873uu75BJ3VsqjxNGOB0ixn1wTJe4ppuwkDNuhMwYoqsvn06DF/VW7QxJWoV/SOX2gAApSzupwN5w1DuHnKvZlWH+Pw31Z/V9DJzKx2XSvHywBi7v22EQ06hbpeOwi0V7nCfLAFAyqzMYDg6z44HY0fHoI8gTcum0i1J6P8PHtL3yATRYJB7OD+JWWcbxxFJHzkwjb1kB9pInSEFG7vwoxB7cZYG42EAqk0SwzpU18QiOOZk9g2ja5BqMNyU52OvjeUdhnwOiTRXC6gVTQSyhLw0Cu/zb7KdMGxWIWZ1EyVu8MBp+zRA9SMmqWllU+vbTGUE9gWqgRz2kRLye7u1JdiLPqOdLWe2oeUJzbe9JzaOvRTiES4Z7sBMskbx7j8bFsSnVvjkNF4IcXJMz1pAByCWJcVznkjBsu0IaH/svUdcotgmilsp88hI99151Vxi9mQ/gWvlByzalOenwfEZLHkGHBOft0PtKT5Gtg59gT0fVFfGgyGbMU19N40IDYtV8uE23nABld36U6Nqu3YAldOQeC/lPi5RURS2oFO9PA/ygtirk0E/ibxog82pR/X/OHK7Y4q2YS2nKjsCIfrpCsJzAgqf4Zz6JVs0gfABDYQi3WkVzgXq05E2gQmV+FFoN2OPpX9mJEPuyQf0tG2IkxHekIDMRSOJpkcjh9hDVhB4ojd2ws3xRZxHlwgU/+oYaI+x+7q+mS8jC0jN25MR60pZFyTu0+U7q7hxFVIIoUEQUU2cwDiWhnrRvbFrKUlTi8A03EZ585K32l5UthDTQ9hhar9xFmlpohcKS7JY3RQ4e7HqYjfI5xGbYAE3sAJxmz43GHJ3UYdeYKYwXT7eZVmX78tmS4yxpeAgp4QovXb5RE3YIkOOqUss/t/Su7olp6JS6mVupy4lIwnaAkphj0kWGh6w+x4IY8A53P8Uqb/OG7f0v2mJTRZm0Dq2CsNvRnAwkxPuBe9xmGSYiNyX29bgQGfK0Box0o4aOSVOLMQ/s4bB9SepeAbQ4RbDQpUSn5Htps1F08XzCeJ5w8/mm8eeIMAX0wmbr5JoCxa1OvuILRgol4vP/a3hUOOgeP/10LhjuhB5ZF188jwH/5plCqYe/o/oPwUYHKPAHDIsTgCorF+Dw9uUu93GYIi/VZQlzQZF57ZuzksED/Cd3tnGtuKxc4z65A+I0cQObb4hFrzCY9+ApMS/XHDbwi6c2UfjmAqFooUvoLureAfG9YBQ3NCELEEaeO3D2KkF5bf/cUhgQLuImE0Arw/d5AGXZojsy5KarpORUiWnazFeXLCb9J0JI5naaqUMPTJLvbSaS24L6JrAvvOAZfMt6eKzOKDMkifOawU8OAhfJ0abuaVeO5I18xzpT8SJoO+EWvZoMU9TwjbaFFm9c1W58lXKEDfdbYqZpWVSOHLAFIAyF6w/wmqTEFYMU6rMKYhpjmzHqzZvG0Ow2v7kRN9mbwvQG3NsKFG20WDGzrH5ODSU3i/ubu4smOKhBXTDX7bYW2qnuEUE0S4TBKrmduyp50hByQ0Aiam6p2DHqiA2ZtyKEfWugRGNkKpCq7a3OomBSNgfvmoxLrMppZTmyl4QdCUHcBJCkeU0JgM+DV/Wpc3EdPKY18jM530kRzbhv7dBjc8Rc2d9peycAH2Ea/Y5NQ9iFk3CL1UquZI8MTKH7EiC/QVOsYIDxcR/KloXuA0CiEFqt3I7CWrveY0aX+U2EyRDF53YouxdMpOKeiWeFRJJAlTZmxGR0dF/9KIH18/AaR70Z7ZXAL5bMIgkHva0lzvt+XSR0nUYLBJy623W7yTXs6prcBw1YDY/y1F92As3d3H79Jo8IlwQD1zcBJAB5Q09enp5B20hmg4MTjBO/OUlPFoyV/HPSk7EXlzPvTR7ZyevDh0WG4uROrtRZcUN278Zt59k8HChXaT8iPKST2960UODbG3p52cDVJpnh1GEw19gm2707ucL01h5R25rmwrPlA8R05A4ajHuCiSG1WNvFWbw6jYsgs12CQFVOU3ZpUfPuVA2CbpB9omCjH/GyVKX7Vr3lFHYQbmkv+V2AeTRJ25qZseituOeA5Y8MahCCF6gUvT9Fm8pgEL+6xkAc5SxRInAW79jpMoTVRY5yknZPZt5T/ZzK/QvkdcRdTdudoUEiUEeL7iAHtuC+yAjjJtqxNBpzXdvDwgysk5qh2x9WTseTBgRIjCmTuuzYYIwjdHVzoSq+No6Dn7ZANcXUhRNnYvdWxpe9DPvnRWjJ/4oo/Pf5qNOQb76TapaVuTLeySFBH29S9L3SL2PCx/YUV6Julfe9ji6YB/LHdw1ypL3a/myKsV72KsduueqQ9GYDfkbxDtMFboIsEBGU8li73Sbl+FeRUksKF5BEDDs5hFLL0r7lGTZ0F+vWj+65aytjPpPGsGduJGX7toU0L0VXmwa4d3zqPVBDuPDi10IEo9gg/5DsMXTgwMP9MUrWi8dhbQOHf3ePRtRwsS24iFUMEre3QChvMY7gMXof6vM1nyhPLlp7BtKU02ygvJSkNdXYZiNb8PZUwZg3CdrFK/+PlvP1aWkRZhKUywgAGeCFvI4K7I6ZO6yeod2vxERe6jRRi1+vz610d8t9PajRclu1RGxkG9X5xBFdC7QPLuw5Wg96OVzdmRMSkk6VxMD0G5Qkx2y3GoHkW8ykNUFHirDC/7ddNEkgcObEox8YN1eGZz/T0gTJWELFURZW6J+RQUguv4OEetFawKkXmgfQXh2HvN25cyaveAOLRiwOG0wUfzMK6Gpudy09vKXc/okbqelxiGWY+V2aSDgosB9+2HwOowj6NWm6Gm+ef0OHdEGz/rqf0AVk61RwU4D3g7LZn9L3UsGuyrKRYVeJ9FK455apu5OYPQGY6LQbPzbl9SMTrSnT9SWLto5kl+GAoHgwPwDiDhizLoLqiMs27/P4owO3ohEhIWuqHfz0PCOseC9+DdWnpsGmT5g4f5WGgwx39EiVO6qgVl6Wb6PU1YnQKygZBB3LTGX96dELw8r2RY/2H1Hp12/UPj0uCvtEpMYWlfye7e8Rgqk0pPRvGVZnIbOeLcufbMMjynfya2/XmqG70+IvxalqO4Gb/sLwqmMXAvpNmZ6/ZCVIpKXsiHKW3BAZqtKglyF6/4rQmH2JLj3CT/3JIXDpyRdMFpgP5U2N3jtak/lcCq8XdkUcVdC67ZBGSN+K2M5itUih0OlKVoeXWtr4mjs+cQzWUq2/gkgcZELr2S1uBNx3Qt0AdAa3u/fp/xhrNwJwiPwwNkZzw6WVTC9aFdhbhMEAB4RacPVLFmvLXils3EaC4zwKRzRQmRdqKkXNnsL61zG0xgmTPwA4BL2xqjRBKGQG9ZlI8DiMtpGZ6c4S1KB/ezYmA6jwKRmC3DqlOKu4gyrvl9/6yRwN1q/orlO4XYWdjjSMGkdDxeDUD2wcDFFf7+auT4PUqSZpjODs3A1o/cfYMlx/xscnWyPb2Q3OVUckcFy9lLzc32wm/bW9qCW0KX5BOjNTE0JYSkUxRg4xU6OyPpWBpiNeGKMn/+q6du1wmkUIfzwyoq7omSPfiwbzWlcVCOwZjDPVMgR4HGowXLAY3xglZGGWy3erUitKzJIbtb/pK7ZKjJrQj86iQfdAfbuNGyx/6f3zPoOJ9Aj+f7oRLt/dvFMU2HvmkKIz1cmyz4gdbiDCXbF7xx8zCprpETZD2ZUAAyjzXE5Ue9qX5Z2gzs+byc+ocY+LddzhzvpNWw3wI1Bn0lmr0EA8s8TWmg7AS+G+qbIbFXgwVwr9faXExbM+CnYH+kDc+5MDnARGtRucRuwdNQ/qzxq5astSVFGYTS8D4mDlJfQAyo+rf2khFp9R9EEcXKWb9qYn/tVXBEVIddHGGVR+KsMHXn0gN/YX+L8qy4l4X4JebR8mipqEMZTMvlRpNMgD5EU8NAmjm8B7B1zDukj9mqDOU0yB+Dp91keTChZU2A1LQc6orgqQxgDqu5QVhE3VfZehsSGezKdFqMGzqX9Su5BjpCgLFrYWA5dAhonVOnR43YeTjoO/aCzbV5jOPin4iUSOix39968yA5WTWu23YRGh2IztDtfzXYwI5R3CIILpsKB1EAoJtC5114IUnY3EQjEFFTjH3z5PFFSKT4BrOSSzDHxRRvu6Iiz8zxFGIB/VDAbqploYusvtmYJKZTdEUYa9JGQSCrh8VKWoAioD8b2cxkubXkDY59jlel0evBb7CgiqJ+FBVa9zcD8coReUe7p5xJOk9hlDZf9lPO1lf8syVIsl59lXRIPWOeFY3JW28s/cPMT0mmdwZNYpdaW1jLJ68ZLafA5jt0FAO9/qFnt72gHB+0XbCXxSmfYDNJNZfCLzcpgp9KBfRHS2crVSrG2OgLim1Oup2kg7DLCaKTKx+ZoxoFZrLYahGLEv5av2j9lGrCe88w0VgAbjCkHRtgvIJb5g6RAQ4RrIZnJ+7dNiXuftw5pvNskdqEB2TfAPbPaQYCIy2GAODJSi0mipd/YzMSc/uhkauQnff9ArYYYrGEk8xIz8zREwt8QSXepj6jbi2rK9Nr1QoVW4fX8v2nsqMKzCxJlT47hFlflU2C+D8FDoG/5/bw0NGmPV2POujMYa9mQuxom+UxfDe+1rU8m+v7Ao95b7YKVLdihBLjnsCfXeUQxY7gCHAmUFOtUlgjllUbB3F4m06quOafptOYBv9vwicswft2JnK7gO0Fd6LxPHz1msE+Fap+1xlJ1+CtWJjiGgQVHKvRJeqiSQhJvFZkuNwW6uuXC3M9T5U9Lh2h5wXAOazd3Z0Z/YUH7psZt09USMR/GvVTYe6veJDu/MTBk0Nit7+ydFKdSBCxgkcPwqgUJ5SHqO/AVolHgdePYhQ6EC0bI3yJQvR98JwpR9je9JbGWWhDjSqA/KW4f7y6M12bI777CEHQ6Hh5Sefre7y1lbkrpn52lJnfUd/CgrKUII1YfiAqHC0gfrz6tgHhezKDbJ/WVm/ehSzBdTfFPNmIYmryUmC/FJ127zUEZ9eBACQ310+jHJS1SbdEDqBqS2281bagvSG0PPqM5Fhu9XV+MrsLPqE6JMnXS0w95U6saQNB2grQesloxZL1kc64YYbNvsFckfJhTtIwjjQ7rU6uAIUmJ0NVdu514wBsmfT22p+x1a0OZ5d/QtEPyv5anQ0AGtFQ6Qn1dADmeuzD5+q6dSgzm4IcNM9NQBg9viVyieVybR5josg/eOnXMsQagEAsLCfTAhjxlmPz+HzzxKUQoF7hsI1vYgE/ch56Hn/pSrvTUr51rgzpmOfJGvhYoUdP3XkYUh8tMjsHHZGsBj6N3CkhRg+wayu5uVqiXqaa05CGJ2dhKdr5tPWfw84Dwwwdp/mQV7OAHAwxBeSNbjpIGP/4D4eFrhkypXPvouJ1dMWJA9piVa0TlE+8CTcQxQrAJQ71oMuCnyQ7AlN3GSrIZIeFFujjU90KD61eVA/OaDkhExV9zgQX4uAZHxbdOUfIsUXZIgwwv06eTn7QJOHxnTX7xykhJrpP29Rx+dJoDxKTPT8pKi0LKJLmSuckT5qqizwWNkSCzBZNBcfKgFWsGfhNag7fx/DxiqWP3ZcTdRRdRhs+pvfV0kZVrPpvi4DT2AGEKtfwT4yn8LSvtgIUyRhPUf4WNBbIxHoAsREnRam+N6QghB4xj80LKwN59xSG6v6ND5hFYDloPA+InZ7+0CZbzi22HzwOUxLy2tSoPi0VKGcEFFvmdw/NJch1ZPio7l6VeGPxP7ZHxPFmvHpkjfJaNQjm0bUtHu9LAw/jr5manmyXswlEAm/6ktIvSs1STzMd+SCk7FHWUXpNM0vJwWi3uAa482VUqwYbq3Vno3UcgJHBonknEs0zj4sETFkvKu39fltETff8zURlBU7TgQnmA2+czUioXoXyeob93b2Lmu7ZkQqFhq5kPktxRfhs7pfTQjLXeGGke4G8KXueZs2TKhKyYZ+poLWoJNz7XwqqC2zY50woCv7sNF4vmlPE0QeOqJhoqw0fx1V9i/Vzky3UOYRl5s440Hrc0jyssr7BEw0nT2AdUdkXlzuHrMBy6wlgjEYh2qMVbBAA5YaqEcHUdGmrXn6cQ6eYuVuiNZkRBo41OIjJ7NG4o/vh2COsh1AOh4z7s6NrHOTK+XPy7SUuMF30rSLiAy0YikPAe5WQdN0OYP7bA3gTK0e4HwiIojqXT9/AM31FMSyY4QLI72BHC2aPzL2+yZHD9p4qssamYLR7Pm5Ad7e2Sa006+M41zEarn5y59PWK9H6zu34bFGK960SGKj5zDnVR6XHoLHtzdvVv43PBa/boxufdC3cC2r9nUYdx+UaQ6VWCDy8D55Xz7rJdmf1E+jUCILhnbyMEpqPKu8vecJf0EuCj6R5f08AtcHGEI0AF4mMznP6rC9rAvhokjoWYCbeBIIXsp2GyF+tL4S8C9L6navgQ3DDncUQZj52eO5XkvFLrt7N3ZqPjAysrcdMvb1M71frfCUwsa/jREK3XkLL5NZlCOCnqW+ks2NkrAbZMICMQ1rL+ohlG9h+iH5xmF5U1ABSXu6/s/jC37YolHDMziHGyA5aZGoZG0RtxPWReG8lq4fw3JFpGgrPZWDR2DfXMvOsQnywmlNs+VJFMvxWKkLQKjyetzISeHJBFYkngQ+6jJl0lkno331vPbiV9lDNRHU+enhpRQUOlMDwTdoyPR9ReYzQuLKY1vG9OV0ZbK4+5q7AguOm2OncnaVAgRgblKSNtvZ1+8L2Wg5ulpbTBGQSLJxsVQre/LLDYTkaPt2t0JwusCXeTQD9GxmGOdBNi2fKEEZ7UPvoi5diHILEqPlkAtmg/svH54WfWWnZmTWeTEWW8mIayzOjsjJiick48yoKe8Ksuvh8s5gAljUi65/hP3+HNPnu/UwU9TpEtGqBspCEDNJR4z6jzRLt9YbRONouCtLhuBOY3Crkw5hxrEmt5q97vMWQ3Jxj7Mlql8WLy1drahzRrgGW/cDEbCHe1lQeQWzwPEQ/Mkp3rj7khY02RCbWeSJSkxdpZ+vLDKO3Gu5KG1ZX4GZDGEcT3yh67Y7UcfLoAanHp0Blr0WI+kl+LqKjOhHRKw3bGCBfv80hC1vyzyRUfo4Y6SFKlQ3ofDwiK1KuOgHm9qrx1q7UoSrNiZ22ziHlpMm/JsNIWvCo+gOiDRraUN6cT+EGKiD4D98RTqnZHqeZ1AtjBtY3b+jQXqTWrskpzn8ZbYB0vmQimP6vHflJYu7nyQP7lKqzM0gYQfQhBz5XYOG8jH4YEx7b1eOnV5Nil4O6eF9AMmV72b3hXdeufcZ6OtVHQ/IP8KXB1Cq+YyLAnW7KX4+U5QOtsE3Bf4oJIpRYHNum4TabuYJ6BMYuJ2RaN1N+XFvXkSs1viQmCVaIMhZBZEMJXf6icRAQnv+df+icM7ZI0nLn4JTnqVjDMc4ptStFYb1ucKE9LTQyrcgG20TG9N/QcZFHFSJwyl/x7544n83l3BD18+W9vTUoH9tEpRiA2hfVltriE/Pto8csCQORdA7YTG3Z2cAwqjLVgX7p0PUI8qJWpZWch/I3WUyNwlWCitr7FDI0Q77zbF/qkMtRZmq5dQahph90b5IaUtNw0/Q3MfoFqrItphytudJnoYTTSXLIjgvy72x6ajdlJeSaRCDAAl0tUJWkgqIgvXKvyt3o1PfKFH9M9XSbTba2jOWZPrYHY+Mfb38GLRStxoG8NTmcnFu2gQp+HUFJXam7CARiHUFpHCHe8fK6q991a7j5viHZp7aBm9QL2etdHuRQMkd2dHobuewv41FQqFNjMV/Fn/zQjnbLapFVN0Y+mdGrt25upV+zc8Lq8OAC+kfSise5cTQumEe7QkhxTvulN2uQQFHuZT98ik3YWNEuyibJQnpTL6eZ41nlZNnAxXSrhIl2Qf+Kh8sa8L+/+CZA9vF0OvhziJ5sZFMkmyz/kSdAfZphZP97qxVLCzeedUqWMDEe/qoREQq3EuEDbVVfRz661mI4Wfc38II2DhOZ/yadZY29/EIZftiLyqjOml4lJG7VHSx/KwpteFeCZlMrb0jFQkCMH5NrN+JNa7+awgDNZfxVhtCeXf5nNrk3dCHJccOY0x4qXU09BoZ6xv9KDrlS451J7InpxG32+MnVRY+NyyMrPx3mrRB+uojJpoJCsQ1zJ8bvwxUIleNZPumVDfRvk5M9V9oLlI/JIJHvEp1CHWkTiLKJDUPXIUFxJM9ihkbHLJ8G6fqYVQ1sCmWr143wTqqaGG6TZijtijji4KGwcqoor4ogXbNqUr/QMqV5r/XN+9jrOrInzO6TtTvrJ9IOhAmXyD6kJbTpmyS+VAaZUfknBx8jNzNidnZOWFb4zFIf9xZx3N4WDX9cFyMnej5gNErgpf3PuLt1UaY+X32DgUNHbgREe5XX2fLlmUukah1ZSZC9wo9G8uGjVrhOSZUgYoMJa0vTTyAVYfHR33J3y0UWcWUbsp56BOojUCNUf9AJGoe1rRsunOm5KcxIJvENI2EHkb2qkvCsuec3gm4xTGccdXVYUs1/cwMfV+xNctUpAbC7C3xrvhQzJc/bFdl3Fo/4vodUXtP8Vi/g38pphrtnInkE5M673uaDgg7uMDzP7q7mab9pAOSxP1CQbnzx/5DpY85wv1KHBbYL4jgtTVPzG3eUgSXGKjP42+ZtBq9hmBsbUttibV7ZZEK+rGDxRS/KGJxF9sk6hHLmdXO+i2VVq1IT+leHP2VnDl9vv+DrESGvdquE5t8xCkv38Ljaz2YTO8AL+PlGtoxgYF/60mopRfn1hPQ+IgrwAKFpe3/gPKInsdrURs3lGdv27kz5uOGqR+GTTvICckihVxImGOh1BMlxuixDVaSrHbffjPGbYYQnT5LMiGcbZ8atdneJ7+ygveOxihz0XFwxb9EdvNpixEeiNrze5VMnIOalU4w7LFehbS9DJ9lYLzNuNPNT2UdEp+174EL6ZLKgkVN9qesKhu87TIlIu+OtZWjyOxtUVm8cV7uXT42n2GiAkUHTqFQDE02lEzndzSeaQzoMNkmMKBYqY6ExZMxDMy3OoYtg8f/7z+EEyXp0D2KUpE60BqTbe5USLGQGcobriyv4QYsRtIDYPIaz2OVuLEhV5IwmIIsa90iLBp2xWwPWgPvtvKCHRvDdQTD35s9wG5PfQnT8UmnpqlhgFZFRJ4fB2cQKa9Uvio4dpwMPcgxJORoGP7Rd78KDrs4O26d/3PaDURzB8I0g/2Bz7LTxAgdxIynFrhUQvruGtj4PcLgy3ogLlNQxXX8ETChiPYGCYBmxMzB6wqLzVwXBYQoELF2b4OyhstxUi33QGMEwGZRB+DKMpF0VV1ujSvN4FLZCHwrSsqrkbNYAX/cgwGVUyLk15aptxrX3hpDo50jplS0M53qojzHQjK7fcoi5KlUJ1I+6wfGXVUBzw3ruQLC9UnHhVALJsCN4TmjiYuKsXlY8mol4c14x/GhfmGwuKFoUgofwtgYfI2DcCgVFeOQGpykBnc/DSop3ofZp1sbpDzenoFzfvmpkXMF384OBM6q9ISTdyWSpltk+pTvDuGeF/LGD93fhfZt0KT20aynNHHD5h5DPRlYLjATWsMVu3VPWyv0LNvvMVptuik1LOFv6mUPxc5Zkt1m1TUmJWDzuE6bCq0bHYqsPGyiWwTwd9UUClZzK6k+VDVqyGXugRUXKiyIob8X1XbyX0LexRMN8mBQ2k2PhX4kh0vaOq41zCEdV3xIUX5qzMwYAPqtwvEYaSh5DAnvYlqK+jL0Ctb8/88zy8B2OsNp0QOIj2jD1MVC7CwcazXkSRMYvZ21zF/xNqlzkzGWlnLAPWRrT/Irz4sC9tjhuNO6vb956oFT6hAnvpWBYxKeCmVgK+WlJraAczrPeJJ7Sm5P28M8ukV2ufFyc8aBBN0uagzmZWyAkKBDziL8Cj0H6SoCVLWmZ7ea/H7xlPCr2KdhCxMwmdGD+oGqryqV/CE2oI2I3xHRaAeVEViRGmFZUuDHQgOeKjBNqEjuZfSVI80dxgLid5550rh5Osui77n40rO+zdxMDn5zltRilOOwGtPIAmxApjCahfLAmBLP40ZVAopOSWVabnroSWL5qITFXtdvPlcv41Cj47GY2O/kNhmKmyA/9d+5MShSLrcOr9HaZn7bmsvMPIU4kNagbtcgAa2fOFY+xS2/+5YE83zSrvZYVB36X5XXq8IOifePuVelWh2FoeJdR9Ru6eVLcEKofgfewbZOE9U4C+UMk8RBNCFYNeW/inihkk8TS4TVSnO4c56Xrgg5HEVIwePGHFjpk5GtghlCLFwYXZX4O8bins+mVXRCyt53b7uxf8waYlaVsf9wReO82k+LTyzlRx96hTpGv06+yAld2mjvYQLd0xpEOnV47LyJoIeS3AwFS985J2F9ILscymQWHge1URVJkoVSGD9G1PeGHpjVm39tbnf8KEYjH5+tL1nW3BrZ7prCW/v2w53EnyUMVfyO+poKNOW8doSqdxTEDTjhy9ovExBttJKwKbGDr2aJr7TLUpR/iE84tzQtm79Qi/ZRqK539hk2I4ltW8HVd3WZqJt5NzL61KGYhKU/srcObyoifsD8IUaFaIjL4BduQuWK5XiUJHu7fVLUaZ9xGyhC60MMpBuUj4FdgJ2FCPK6JpGT1PELNs7kdTo4ihwKeZZxaIjhkfDBvyydDpSy+XeQbjGKOpR5guvciNHDMTmvXOnrcJ0w0itZz8qG3EwqHx0Cqt8RHU1ihHlcrW75x2mpvPnBi9f7aydC0QcmzU8ho7aviXj1QDapzA6SCihy1Lg0O8K09lImxOq4JJWYktq5GANAZO47VEqxMSx04oOEn9XTbq9jz0cu3gbyIqdysrKG4C2jV5J+Va438yWWyqTPaHMSNtq5TBeIgoLu+rEcoDDR3ugCzqw2XAn5AJeu8+Wh3Wa20wovXuF7PUWtD811Pxq2c5zYOPp14w/1mRHFwratC0739UwMOofguBVTqfD+guPLYEBJihrbAYEWgENjV86CPiiASiu5edSq+8akJDTIk86iEE7f76n40OBL2JX69G66I5qBQYT/kJdaLADEELqOzdCSR1WIHDa+C/J9PUAI9QchJhDipnaJnL5g8yuCMCoUOU8V8PWv1er9SZLfyordLUBswKV4SfZdxBMSMDJbDcdmRmFd2jyrliMIKzaweAnrdD1EY8H5HKsOCUwhCZ7OhBGLKcLpitBjl1k5j06s1jQ1gLsCeGx1iVng078DqbjJ7j1GjFKA7GhQCBOrShbgHOGWmeG+68BRLv40USkaW0dSRFiIL2Dpo4JBAjZWmHqixIFRXJBpAK1S43PKLo6tzYltH+J3c6V7qM2SMOULloEcCgVcsmd3sPH9/GJWXTEXMrVQUIeJF35YBRT0sLuxwJuRdSxObB9U2pHJhffY2GrDp89SZAcR/dP0f1I6UhUusl5Xm36hZf9b+oNw5r+v5ttNB1dQZk5ujkG8WgS+F63h/pJ6MZCu3fPLC2VIbH3rkTB+/XhUa+ywjqp1bVhOCmS7/KAHfd/E406Of0g2wuuU3/oQRGoAmGysOFCF56JnQo0lBsyuNvh8JnyAAkERn3mc+mq0Vx6jOYjnV/Priun9go5Py10vwhJVVc2qo2c2phQFJFzsuGCLWLp+dJ5+WtvxnBOF81yZG0JwXm1Qes716i1IKs2wkFPIOKnH4T6Sqx0xPKeDpEdMiM5F7tTFSexniL3424xYHCg1uQHiL8Iyga5ZZvCKrmhjoZt+TTLLlS3BrYQLPHdW0Zc4vtptk5rJB2iRrs+Cp6LwDjXb6UXrzsfFY1YxdW3svmjQlzB156shWhX9Xww2preCZ1UepWE4HXJmW2DzYIeindT5NSl8T2DveMmEr8U7WFrYTYQrxw66/r7eSm88OxSVRyE3bwDidmJmu/pyuFzGjckEMG05YKnk6cBq+rQwe/AP0uRPGQOT0Xisil1mRUGpl+mkP5e9nzdvs7KScmY224Pntd0o83nbHWvTeuXodbAbnwnhDKPT/XoKH74IViaNux2ASFso/qM4+i2zZNMEyvw4VVp0zcbeima7p0aSYef/rMLd7Xvr1pSSEzbvZYFG0sV8ipLpT26yu/ItvpLwnb53lGUFF2oze6XCptL1ewkDZpU7yCoS1SlmR6YaqHvk/mPGKAuadkXooJu+s065gkXaN21Wh6SotWBw2JLRRE4xJMP5Fh/takFafFsL4XCe1tbjCp0Dyiy58NGNMruYPeFuJTKhxTTnWKNLn0Iltkk3irpHh2MH4SZCsWU+38cEl8wC9nR36vs0JhtTupzdZQk7ta0kfN2CSO4ar1UbiGsGWxAxjou5BFv9Rki8u/aJDplirtVn4iM31m6uuTLxNQsGQa7rbqG1CHN/nv1khZiHNCBjyTnY0elib7lY6oaKXBGe1OJyGAIPCt5NeQNLYpqrIXvMAJkKErAC4aHP0k+jONBMjZkCdli3vcUrbkMeUJ2i5B6pv13M7qUbWg8/50pDUbodWo3YxBj+h5i0zmlPUeQq2aq0P5FPsw8pa2m/e4PX9HGMDN73rh5NXtVSIfhnqbyDUXfyqkYGareB5rRstmBXKAhM3QuSbwUnBbhHx8HdsSLC8A1VGGZistm/hJS3h64S1IZgvIc7Zvo8UzntIFic7CRBKSD/ItEhf70FmtJWxiBBnPrhhBLXASn/tH65AmYDBxHs7uSqdC94OEaQ3M9tab/TJjrcCDhID6d80+9R3U3paKzD5jk+gRpmyJ/YBZ0ZrWRkjbM4cPdArQC3jCnoycKRXULV3CnFGkuoHo4qCE/A7cYBxjCx5YBE2EKKNxfFF/3q7xah0YIZvff54bWl2dq4n4vtGZ5Rjv7PbA/F+SfeiXv3ZvUMrK1mPxZdUBLtMzG3La2YU6eTokPx8O8NtZqiA0EL7APfl6dePg5zICQOgf5MhGxx7oyPPx5nlc8R6j98R17hh0w/UB/88Jgl7E9E8LRJUsg47/O/N0653aW3Jrcb3+gwXYjbYGt0sb+tDLoU4puTFcQvggdJKjnCBAeWN7pUlAoN5289TCpxMToF7scoqYCS/y8NF6JqKJwhaTAtzczXjI6QFi1WF29mrfF1IzOWgSzep4l/7bKDIaCtclJHvwEUCVjJGyJBxpNB1605wFARu4AotO0TMMTrFNrDxwGsz+kCcgT3AdzSSDGFCxs6jxjrYziqIfFdABqTRwz9s3bFbTf5P2HGPLHpLKrvpTZ1bYAZ6RIoH3x0w2DEzkXrSFfj2x8aOzh9ERypiWPaLo9WD/h9SkUu5AMIGasDTuQc6CcuO36YwcqzShPfVtQ1BbRqcCV25S/yk/tlTdTcUtU+tH5SLHxGW49aF52Vdpm/ahoX1QchNBRtVOkmJQM7bknW9blDVOK+f1XK+CvYSmDf2Tg477TNJ/OExIniRxcY/qh7glsU/VnVj6uDUQ6sV0bTmY7vPNcHo45T06XmGQod9HEw9+WruresKwoARw3yDvD/t0pu+74QJ0Tn2LculSaOjCkHcuFlvb2kGAIZFixKm976QiW4rLTF5OPQdQCUgncKEtiP+OdzkYMjhcCVPOBIB/7LnfIa587ZrPLIF0/Aunhr2v1V4lZleDtVcdlz0c2FO/iLn1L4YixmEy3IMs9OPvS8MgpnlN/bBLD3MTGqLFXHKXYBhnVrzc9DWWMa/TpiA1s0trquPgL+7C5/miPzDWnmRSn1DoxHSGMgMSGrAfnsj/7YrJICsPXMa4NoPY67WNBqL09v9jcy/J4W8HvbAKO0vWkzQsi8ZsAUucgwZRkkb7jDWIfA3MvwMVriJUDjr2WzkRigWLSerVAcCC9SNBkZAma2X81fpwiWZ6ne3RuFAylRy3QiPLJD3x/LF8gYDubi7PS2wa3Hpy34PbdOrHYI0mQO4WKf+65T3MPk1VO3anXh28r1pdZ5DmVdVMoOCIswHlD/jqYfqyCyKNTweBjRbUzgIPWqNywzR4NN5CkSp9hvYMv/y8loK1N42tt5n9s4cFQIga5wf6/6mBVG4gUnUdbfUJBCYMwcYw0eZSudM9Rpy5YpwbUuTMkJrspKQuchg2NUrtWbtIZZdfoNi1/6OIM4nRhC66w+2UmVRANyax77NJf5QiOu4+0CcEVza8/2Dhmk5mDVNe9+ZSsgvwYYsFV1s8bXahR1Y1M4Qe36V0Rfa+cKQFAh4MxzI9yxAbDinLd+ZBpXRR80tKECbaG5THaRoN1qcO5IMoyA7PZh8RqWNruurQzIcVy4pMmhsIuZE2Fg+ZtgyVw9Z5jmRoKImbb1Umth+47MAKcmNfslhmNOt87BlFt8VXJTGUVeLD4CK9BsH7LUdvxpZbDCnx3K0J7zrmyy+AworBYeNvk7u4ytvK8pSk8lguTz6Z2yyHd4LFoCXKoSslbtFZNOKB2wWHGpfgagEqSNYjCqx0W6lJbAgNG/pw2cAloBbJvP1+hSYSth0dDxxFPoSMRryubkaEgawFTNH+mB5JEplgkKHYSaq1YZ9kJqLDUJrcKCZD2jHW2d7wztW27VMrbn7CIihlKRxDi1vzwoqaHqBw/HYXVgOYAk2t8pS5U4677z9PhXbsfdbUcxRC8BZIStgPgOLz+2d6qNRshTuswTYU5+F9jEAufZCIoFxS7xaU7ryK16Z0tJOpQjcBJXQ/NxGKCkPG+nH5WA9n8OUA5vkNPjJg1xt33W+X8brqTPbEI/3vVf2Ilb24MsI8Y2aVE6fyt7/DEb6VVX+VWWs122Ik6oAvH4dXOmz2fiCb6uJg0vXHVWVGU9qwHek1Id+zXhHqVaYGDQRYLmZYv5gT31PlVk8bb9Fk3AfhYUGAD8RQyYvxkyNtgkZMyOoP2/TDObJiNpVOLkuR3LqqDzl5+qE5GOsMFilMQ73wWWF3AX1DFmDwwnebxpqZkQR+rgGnXoOkCxqtZlj8hhWnKMCnyLm3sBvvUmGe2WZjpDqLS8lVWAnRGsE22X04pR/9Av13SJU0XkQyT0spcyYOl80mcwogyHWwLiee/Vg6dKEOkz4N2yfE89NWZv4zKZ0pAeC6HbUVJKpxF0coBwdyxcrCylnYimBj4pOk0Mul+9zD4Ei9Dm6Fiu27MNTdI/UR0aAhWL03uL6BAmG8Sx+tIyR6UYDJHfILTKZQEKFH73qRXxspueUcnW+5XhpGFFoC16T6D0rK/9cmr8Iw038Sq7bw1O++I75bzpe3IYQMNfgdJO8526g57kk8k6UVyfQk6htRJm8SAi/tf5W63AW78eKUlPrV/ZniO9NwIWrTnBlhR/mFpbCGgcazP357NTHGSLQfEAr5R8mRerQWiLY9oXhjK3NWHcOaO5E6JkCUwpQiPTgBNKUaXNfqhHwPSxeiNLA9n0M8sH+KcHMQRU8vNAr/MHYR9oqXLrq0NgerFCXWyySjfsboe3wYyp5kYE4o42/YYFdF2mh45vUEh61f1dGd93q3SzIFX3jXbFvtnAm1gpS4Hop7pUSTat17QVEQUvcygSaC22Vp3nbPk8hsvDdhzcBNN2w0cGMKqGPpLTH04WSNz5BDqQa5TYbV08/XG3YE29lHD19Mkz4ANDH7F2JHiqHse1q8mcGrjo/u1ZU/ZCvklAIuDXBzvSTMrjYyOAMjKbTBklpnhpMPgSOOcBSqLFsTdFgCiq6VC1z7IymzQIBeP7sQtELcMIHU7wklXMOXHR2Zpf70PhZ9cH+cTiLslF754UQCO5dNe6RwNEAX43eB3PQ6tje5kD/mY1qE496gwdN8gFujwBReDB6kFjW9PKtyopEjtmHJeai+BmyLrMSw2/LO5cFuf2cugi8Iog4Ag9sCENmkX3LE77iYrRzZJORgX7FrUx7VRHGLupEOHIyHVqpcWjglJZ/0UYaTE5Qh4BOF6roDrA8QCH3ftMFcXKWnShSu3H7g2pq8yh0q8IhNmKhnJtWoJXJoz3Se1srHEOeVx+2JHyh9/p5ng9SBTnU4Vc8tECA/SD/2HSCt/I8Uz0emLXKCJbYQcTCyH0T9+CMbB6WnlzDqR3FGR1bJnWjvZ0wgSI4aEu2nxcCJE6Rvw2EZKnMUbl1rMxoqJ4DDhITPeGixEuhuVu1yWBL1+j/JMwu77hRTWTe0wh0ys2AYXRdv7W4rP2rAc98tW2kc+sEKqcOXAjmaaS+84gF9u3XCZXJDbZbesP8GLCcUmAsk3HGwPGdcilYt3uTkm5uTBZmCCpC2/UtvjpS/LpP5BeezIfo5B9qLhOHdPRrT5lIyaDarsBgBTERLNlKTp90yshcVODwGd/L4QGG881qWKm4OnPKHxRl9g4qHiREfsMzaM1YpYBjh2MZgBlt69VVxmkxLqJv/6RS7r2TooQIU4XnXdeNQyQRbHOvpDpxxSio2k2YRSDW8R5GS5nBmmW9MsLidwYmwFOwNcL9niQeVxKmxMdkVYTm1MyKZ4tHpc3Wo1Vrim114WHofV4v0th2wG6Usrp+oKzslsbbKBsBx93chjb9XYAgSCYRpn3bICdDcWx4wqCg8VkJZVBU1SSTo3SJE5xGc16Rw7Q9IKFCLnTvCARkoTPzOd5440znqjjAJcqjO/r41Y5EWjREOTpaOPPFBxyIG5+e96AbVCt+Q3hFZLD9/hncEcqF/p3mXxwaWL/g83e+ECwfpO38XB1mRiTkCBBsZN11aimnh++78ag/3yXfVpzYtJvLYJ6NDeN8RmRkxjFZH5Zwb6rfp/k+Blvg42ZmfGL6v40bE+b2/RTPY0NbLORtX0tiAK5ZjTs5EGFtNIvzxNFjtl6uxS3zpMEC+7stmte1P9r2HJLe41d1gSxCkUXHyA5u5TrF9FN5cpEP7EEQV+qdC275BbpvEHIP9hfJOp96POfOIrMhaABxVAu5878Lp7MxeHD9twMi5AEg47zTWxVMaT4aQHgBT0vaCM12Rmgc+OeXVLMPPQsJiCSv7pX0xyQakrXqM3gX6nG2JZUCmwVL0Ionb7mousrPJJsucCVj02rJduq3Hf7WMhu+2nwUDJ/EWkbHs9//5G/VY6/g1APelNKrr+QFiWgzZslyCBzUTxsuVq5woeP95iM0iZxtjV34woS27gJW7BvPzCWvHfOpHA7boVs9szzxoRE/NzJfSAsHuChZWMcCHx+l8tNeUx63YAQozCeMd/j0nlp++doTIvJgGrZefqU86mf1ZtB+WaZvPlHwCBlD+Qi6i1mWIVITCxSgIezMrWZQ7Cl9ZyhlhKxtmmzRFjFb65Av0uV9fAeNcYQGbBk3qBwN8JDBnYcF3EJdKenqfmUQdtgdT2IfmrC5tXCrEC5PJxoJFjLiofUiMmsa9lhJnAU5q/oh79zy0Ktyx0nMctCet0BEfDtM/SO9diTd7WlnChadhfT3rM11BZDZFYe2qoZYGHXOUYIKBIPeP1T+sifbhcAHgOqrePJ6mqNqWpvbsvWYXdpI/69dngKhfi4xwxQE924QlqK628uu5CjuM+UHLrIZAbxb11q8PgQREcDGRWBGI/EU57fha3QUMQidJFLyNxVAD8DxqjpO0WsjUoU+pmeEna//bWcoJ9ofAvnTBKc2hpbQ2wd2Apnm5OLd+6GGnDCkOOFjc0YUu0a9+RjmW7kwkxQ2SatVSsTfEnzfkX54Fdh/9cz1XtntT9GYZnDIVvivmDLjaWaODRbmZeh0qwWv0uma5Ell7YpYmSPC71er0dldMd5QhIUY1E3n7L9qlDEoXc0C7TQIq1bv4ew7KvHS8vp+ghDJNXkg3I8LlZ/4oSAcnvR8l0Ql3xG92Bjqw1M26iigTcm5pS5DrxRS3scAWSjYVQo+lDP4rLq++Adqb9MR4ScMlDC/MTgpIWiBhaR3AQYgR6oMxDy8lnAOFMREropRLWsBlNshaxQEJkmAgvP00khvbNcMklpf+mtbnsJiF6qhRpnmO/05yU84HElJ3s3SmYyxZvKmahwcBUbsQ7QzGudOsDqiaIocxdcZEmzoicljyQtSZx/L8XYnuuJ59uPHv1F2NyD/GGRqyXSpWZ16mIrkesvFCYk6R3OnYyEwZt3vyVlXEhDzLHzxDT0xE9gb3WmeBr0vVWTxrXmEwWAk3rfdulzn8IT4jmRxRygtVwq5n4YeWBslcg7oy3yo+11uTRR0pBNQr6HFRt1yAGpKlAfz4qqwkIC38mor9iVizkNNpIFOwq/E9CVbN8fMg8J2rrHNjXpm84cs2sJcRRXAeh7KlWw/+Xt4VgUO+0WiSLy3w/N0YfwdAqAAMNB12rcA1ymZb6I6Taw6YjqciAP8w5JUBXKUEJeX2e+zV+xjDp5sQ1s6Yh2za1RyGFR82bZSEzk0sTD6iNAl36uWVJNoY/ZLmZI7WrEb5ayWIk5xoRNRRawC1qkF6lEHI39AAq5L6kc1vcuEm221acwu+S6zfSbxIHYm823ReHCBTdQajDMF5TUxrmqjWYjOxBnpGds/NBITbBdEAjNf4HT5Zht8bnaMALu+NjQeR55qgL2BWsZ/0ipKlAjVsud5gv25wqTEwFlfGOA9ZpSQ83TCRDhDXChT/QSPs6UUqSoKAecvk+gRggGNzLvGbBoof90GZcTeyl6TlmjZWlu+Mvg0MyrIZGfSBoqmjKSDa7NxKZS0TX6izaPjK+ptXl5X/oaRj3bORkUdtWImU8HSeW+I8cmjEx9f9tFjCNovPFP+RGRuRVj5k5E69QO8NgZWcJJyCttsK6ZLQgr2ZbxBS093q0kNSS3srUMvqu+e9r1bmTNbQSAEZAOLXA1MqDXIDl3OCNBxLdgYoTJVsfJOjN5rowh1Qpe8P9Aq7jDx6y7hSr4iLp3EYnY3D8Zc35q+lg9o5sxzGbKCt8ZpQTno98tyk/nJdClvyEMZ+oLF4yx5jHKjAXx4/ixF7k/LoQEK07QJnso2MZBglKRYmXDZLQqbRxro91/tPdNYZ+PtOxKQtHGC21v4cNbBpW1IbBYBN9SzQR/iDi98mqE41mslh2GdhoWQrbqe2topX7VPBq9NGTzrYgCNwHfMFS/3zw+bWpx76L3L+hCpoYB3iXnpwy/KssNHtkv4tlmP8T7E7GQicqPXAcQUmb739nNezR79ybnCGiHsEh8VpnhpC7HDJxXj0Boyd7Dx8vGl76tNGA8SA51e6rQeTEujfUG0lE/Xsythg7RRiKWtCBbGgdsYNlFgum4hfiOUEOHztk0PGUaq/24kfpSn+xT6atO5PnsGEcL3kWTG2e85KlY478zdB5ECB4XypEXe5EyP2qyqldf6DZkBK99FjbC8VOsEq9ktuir8tvilO6IBRgv4C2c6UbZyf2uULBaz0SxEYm7wVeQM266536qMhalmnuNXwFU9GdxyTLdUk6cdFanP/IFNeAPd4/loLkCAz/NCjO1Zv8l8y21tP8hygLJ48JkxmMtr6ZmNQcLLIJYMy0hffUM7zuXdz1qBbzF0nv26tvMFDygOhcfrkvvQRi5VWEATCpxKPuNP/vCknPn/tou1s3Spsn4LkneSZ3vl1WLGBfDIKDhnLr/VoimID5pi9w7hjO5nVeI0PAymt8gyBUB3HC6WUi6VToJMnOlRCZVO1TIeH+/O9/Qn3ZanlT5DPtZfayRODQWBTZx7ZKYJUanvnU2IZIaocVGwkQlLztpFYsl2wc/q/22EZ6TnAJaDOTpDq5P+7E26KvJg3Yrue0HjmDjGNlZtXufExCCH9u1YQ+mNGIGWaWZObow7ZwRuE1l+48ncUL0cA1cvWBtymb1zUd5VxoeVLUHHCVEYYYNyJWIn5Qk6J/462DIiwG8RMhngdKe/dCiUfsDerJ/WUEBHbamW/uyphhCNf70AQS1BO/V6CkaPxytLPP9imeLhAikAPCmZ7fYyFtmjbLYsKG+9H1YGh4Idz05AKMGEWML3tqkwJD7E7eFTFMT7wwntVHhO8JXggN1dWSkEVDf5AybhlUghtma9IebA6p/7p1yiSHvRkOaNPIXofLoXmE7csszEEhBbdBJWlSDPP9tlflaVnquJSgNMwkPk48hZLE6YireaVX+ti5U28Np87UcksKBx1zAKmvbSAsjfzosqLqVQTKYi4MBsiM7c4onSOzFvzMotCDWy1UM1B5W+h6atRed3ynrO8MfEi4M+ftiCA2jM09OnHoVqs61gUzoWd3U26z6iGnrjT5fGYtVpgy/W4ZUFca9IqHq1fq0K5sSr+tk/BvUNWdkyzeQ2vZEgvcQ23Panjt0T9eCjGKCf0+fifNQO7PP5f/XNuGh7zlTarfZL32k+nSP6FYvSPJQXgxadu2273vl+wCXCXxach7a8V/bnR3HYiPRbafMVbvoov3n2vhQsFmDJBkAoixSwEhq1H3St6vIs/sBz5iNTNJQiC2QH3CXO7FaVHlORgEs1qfDC0DA9Jwnj+8Q5eO8aHxd4pZgxRxnfp5HpKRE4QSaBb7XBpvAgpIeyruZnDwlLlO1GZ0JomBBWPxYzh7m3fOkptDnGZ3R2NE4XBzHHmniRFjCCkTGZoqet7EN6fwh+V3mFlR1b4hF4BjMUY8+n/aaiX7V8A0aCZdba0lHzpzbI5uQJP1ogZq8su+ugACfK4VnbzqGiscqo99558CRtUBHpSC4rCuk+9iKvbODKiBHN8+F7K/xqhSfv8feTRNEz2PIO7ivxV9iNd9lkgmUsWdkyLUwNlhyBp4VsXx9V2fyE4n8YC+JY90ImikyBOSEYBvdHS4JRtwiX7f9VNao3pjprDOuqIcZS4gvYIxNSBcc30u0ba5zdE8CMWfyl4Nlw3z9nQg1GjDtCgV6tmWGTm6ISQP8N27UyJYwqlHwnzCyvDo+vR+yK9o00OV1TkRSm1+Utc7WxSo7x4QePsxG6eaIAS9dAVz67GfojOkBvR0zzMoXzaGt8SyCPEI6ZSlslbnrwbTydG1aU+pLvVWrw0mpHE45CPNFUFir2OFpQwJfYc0cGi82qcENYUbyLOI32zCQE5sp0JUQDuhuqvkAqMXza9amjNUHsD9rApRJIjYBKudoeKDBpFs427pgG9tj1je+T0NBl3zS2eGH4VNj7folUk8ZWbwwl4KQKF/nWWMClxWZiEP2KfP+X9ql1a31NBb8qBjufpJ+V/hQwitOkIshZfz6Ox1+epByOMxHcl2ADQ09TACAh0Wku2cCvI1uzkEAMtew2BZpgwX/VMT7yWHwK7iZYv3FSNGezRMJY3wACz9kULSDG8vG8CWJQtoXkdEFBAMmk98LtdQjy2ohnWtVMp0F8HTGf+Y/jx62J/f69vswLGKCn+tEd1Ij7uQ4NgQRRxEc162eFG44YxpOb/5yUx4D7IhLcQU7qM15W6HCvtlV42ED17bNjvU1VbaEFQqkek8qC9Q817PeBpEk9rhtH8ZStyTzD7vKRVxR0CY6bKF5QBDXCh29yTXmeDCnkJQOgjBR6i28xy5rqPVKyzZ9b/bgnv4RRlQvLUxhbH8xgNANa/cLR4AF8r3xsS5GRq7tL8OO8Z+D0PSsJHjbJWdbNHXfFg2P7tp0sW+3GYejIvYWp9Pzxt6xDOPV0e+Ype7rtkp8yAzCn0tOlDqOB11RH//XlMQkOi6JKgQZwps9aUQG6p2bFPuAIapa4pU/wcs6FGEwnH5XMJH3bfxRa1ZA5h7gCrcGYZU0RjDS1TIBvypIfX1Pm/mwT3JcpqviMXNssf300BKLTU0aCinPFQZNcQ9t4LaOReyhrqC4nuzgNgJ+m/8IOS0rjnd8rPEMCFTLRo7neDT68OeNp7tSqqOpuTT9fsfoLuUJHeLiqe1EYIeU4AitM8DXClLtXjRxY5eL8LmaTBlYMQiDuUmw/W+kjSyVDBbjtelc8UAHfZL2ZcDm0fd8JTNZ6aBmFlnJQiJCK+eR97YmWnrh8o6cIwybR8jQFwZH/n6dnPim3vjvo+YgfeHc0762CMfyjCftquOgoi/KMJnjhXGcO23pd9UaumUJFG0fLGuHqjmLUONH6lx6E4e85ykV179jRRyvgp1HtQSegJHpdN3uxhwXp1fsX22JGNtolST4DiZL6x4MAnhKE8oZ+X9W1IMzfKDYBsc4AlEcGBHxXb3KSlQJSkxoTtIJ3e25Pymt3du0wv2zZDu69aLlDIqiL7S07znNtyuiMpNPjpZ770V2GBzRq95oSlaAna6gw6Yo55AVh/fNvPOnHc99E56mBxWltgTwMaNeAAgYyTDk3liIwTZH2p+QTI2heXMX7wNPwITEG1uUf95C7o+usjXIywJSGqAruPDLj2rvrfSh+v4OolCE6PMOMDQajmX9+QH4+LFl2+LUcpTKAdUd53nXpxFKAgTpvIBfEsCb1AnU1pMTsDNLjFZ7u9lJaur0FXzARnq6yw46WiJ5KqcxB/cyUV3rm33xmGVx4hUM/Pm0tE0hQhg4rNlaeJibAJDk6Pik4H3MoBLYrkNYXUuPqhmBhHoOGtxdHwVwuMFK1O4jJYRJUnPTiU9aQhfvZSAMqaBL0+p/oHTLaIsaMfr/SBItL3ghuHVQZtvoQfPGBxsLUVwVIBAsL2UL2VmJ1dz+Q93+k6HpoX6+1w0FqCVsfDHjwCsYE31ahGPdrCZN52Kw24w3uyGAeLi5LF6M/drkXujKJsiw/FcAzEmR7BLtgYI7CAdvMt+id/RneaORfXAcaI6au24Gcpt4aMZICbwImGXh2mvhTBptBE0xOifm9RXWmwWErpcNiHFK7tsSnOFs+e0Ec/pJdXw5MAkgAOxNAbhb0wuzXcm6OlPdKJLf07SS76Ooiyd812NKJpSTtqW2Sx2kjAXoMYdbfRjv4srLZTvSrSOb108yetEDY91PEnH6jaYSH2vm7OeSz0CVTJqy8Xbj5sth8Ua7AGY7ErX5eOjDSiYneaiKFWwx/aj9PxYleEJ0BH6uuSojkaZ0SNrTew3r1Oy4wVNgrSXbsNfjuW7RiwdByJqekqKGi+X4uPwtITki085aa+cOO0wasrgJr6XQXPA917ZKjbNR8caDs7JuDaBmpnayu6w6036E5vna1CBrll4KsClJjmUkgs8V4DjLS8A7T1kGY2pBOGrhx9Kp42RpxWmfgbVdEJ4s//H1MJHKqO7SD7rWGe6Cwd8ozdFfJDUKHLxnMZ1YPWuC11R0+nN3Kk8zQhYVbBpQ44Nwtv5mJU6raw0X94zwda5rkJyXk/3sHH6h2Uh9wZIdMof7kYZ5nQDU7fooRg2qkv2EVwk8VFmUWo5x1Jij/51FIsutlcLkDsm63xqodMYaVH/ToCoRBxDDEeN/1KV4RWhqH/qq25OTD9BcjHfIEx+F4PETCTBtmHl4BfTyKmwbRryHlGPgZRQLchW7e2D1ELtOthLEoWzY2nhucsIDYWoO79+9p/0hZOD2RgGFWgUFWxkXolFDNd5tUesulc+VHcTAvFvQe2O8Qz0zq6MSkalF2xWDBzYqtcjIJlwKDlGFuzKtbGFJtX4/6aS2yCWP4vT4T0P0m1o2MTelEJlJtsjXNVxVuyQouviU9IbYWZp8QUUL2/fqCYfMKsck3KZrxf507g/MIx6sgZNUGHdyigsJYKyb3AWyg3/C5md/MmTfNs9KxsU/NNBT2KU8KplEuTz0rFT1thMuajhAzr2VerwabBmXYLmY4Q40PUUhpIE31VJUTokz8L3oSxBq8U8/np6cEyPpKVTInRADykoJXZ+uF+hSTcEeF7SIqG8GTssiDCnQ9U1Kf2IWHxdW8KbBoCWE47P+Q3z5Wp27s7wziwHmuXMgsoekbeurm7AIlM8NQdgnGW3NoQVJnxptOXiWo4MptAsoaMB+v++L8QzPl6xRLBjxZJRwYRoFP/RmdvnD+StYvKhB/pVLeRLKk+D64VACEHp7GgIR+PMiYvhAiCGQqs2Tm82F+LEAcc5qfZvF9ZfYPIXHkTFa5pLzSEdtzzGDXBbYiqGfSOzHxvuvpx3GnETeGclUIJaF8KCHW7e+CRWs3DSX3k3CmrU3eLOBuN3hjWD/uNIKIxAs06R8MSR4iRvMtqgtYu/wPGwLgbizxTK/bVeMJIVX7iIookQl7HD/C2OpxuXcJ0FExP55ovIjqVoLpJuTK2tt8l0VnVzlY6AlY3B/Bb/sgPIq3dN0xIXmYWlLP60musd6Wsd+caBLPJCaTemNtjmEUSgnvDLTxt6kiLe93+gNeuLAIBgKjr/nvoKIz+aZwlJjHJRrGIvi/K62oEntPvEIhIFzle85iwjBO9KzK60CC4uty7xyHfSMVO/aciro2TCbve6osiEayXJ4QL0CZv/XAbox8Q+ddVekyY4uraDPztYBhBXwg7PwckPURdXIkHqJZIB5xJzfSxvM7uAqOBE9hjzw0oxeVQKT+p6XLZQD7TMU88qLH46pRg2sytS4LAQ2BhOdPHmJC6QQt5o7RGwJxWcQdHmp9ggtWvsziwp+tSSlrLePIdJcbCa6kp7KMq+QnzAry3PjyctVB4cEcjrXVMhc4Kr1oEAhlOyJx6ru4rBFpWiaqcQHT3dGqKD34TnZ+AgXWKtqnQ/7ie9PGATzwYZp2fNYvvgq12IFeQmUJpTqPJ/yUZMyuLulzfM1qOIzuFbdjkXjA9wkYZR+TSrB0GxbaTC+acMPCw42Gs7a9OImXIBtz5gbItBpD1xklYmnthdsZwVQsIs9A24EKLYEKHLeaWOsWiPgQKWHpyuJcUEl560IMa9BJrLmaSgrwKsuxDHSL8VnMiaBXGV9Sd0Ghja2vuQwtZgbqvieFA09KVMdJ+jsUFKok99SaCetIoz2TuGIvcsD7JNPoDzZaijx4ZU3LG3uIap1y19LIfZFu18bKE7Ena0PLpENfdEil1Bcjyyjfgk20Gr/EJpyP5Wj8xBozXWyLolv3J9yuPqJJR5nHIc2AcarU+HWtxTd0IYow2AVpZTV/AtS3mDqDkhB8GeyZ0xkOCEybDlPpu5zhCtjqBrYfeX3Bo2ru0zbalURF9EhLoUEf26O+IK7mBkm8C/OVr3eu07xF3aDP1Rl53VP5j0VeCEAEA2ce49rRMK69caYUkpdG3sjxgTuzTsC7t0sICm8n4SIcc/ABM2f3z6eeD08acxdA+bAq17IiCBlZ4HqXJnU4DwedUBcoixwHvBa1/dfgda8P+/oWxLaWzRzSeVjJj6+L8abA9v1XoB14WWnJpha/gzbBoz6MotKwlUygLB4b2mJc6YK68tEwKWMXSJg8JwQVyVWx4rCW2xi6NXVxh2wiswmQ+rySmRRruH0TDxwq+Ihs85oGZwANZYk/W28WfPZOyrLU8dnQLdJ6vXkKRsNHhHI8kSUDRyEWaCZyhaN18M4fbDBUR+uvhVvwbk+v4PyfqX4QKMblFCUkh2oBGWABGjy5z/Ef+aswZw00UrkXlz0f/YHG9FsVtuVXUxVE9ooaIvSu2hf7W6hRYEu6tx1t4yu0EZrLi8yC23EfS720Qua0Y7SF/fg8a9YwT9ATGTL3l6iRehSEzUXNHLVkyBuUiGq6NWmpgr4+7hJpjNOFLG0uANeYmJzDgmu7zQ4T9Ycg/LQglRObNDPem4TM4goTZ70AvttZIyWhLlG4RE+fOPHzsPE8mhfI9WxeyIKVuR9Fl9f+DTkJCs74mpgyvSGaiJiluaznBA2IreXEhXpA44chHAko3J5bNxi4j9NF6bfE9Es3oSTCQgSOAzb8mycYBrJLPU47wQ0Vmpe+4sZoSPJgU/sc8EXXWzVPEQ7gDQChqSxlQFx0Lnh1o5nk03mt50RF5FHmfbGkdbr1oNTiudNjb7P2Vj/J7uCD8TGDvwELmZC8MeH2YGLubKvwDiXGAJ92AEch9sL8g4Uo3btlT5Ou0A4UDvIOmUrbVXpljEl4TdStItOKygU3QyNP/1u9ivGzYveS6Ekp9vL2gk47qie5KFX2oCv86NbvtUrtCLiKnJqMIenS8rIYNmzmzxx+FXEuLAjAZe/EVnjvGtnoZ68qBC7xbqfZD9pVmGi01cGN2ptUE/Ga5A+HWL+UzW8dYtk9DW9qBtVVj8cXkaI5sZujKJUf7Meqb+DuC3Lt3lKigx2fsi/UJQRyksp4CP6P1GTbtFq1oEGgRFo1OZ5Sb0fB4Qv9dEftwj8QGMwSiKavBaxrJtW5b3B3nLqYnulC79KH4hHUfX4UyQI/bS7oLNQcwLBcSMuklbCQK/hovNSVnuWmxYE7wkM4sIm7297OR65YwJ8Ju7f7tOr6uQ5neGOOGWzzlfdwvJaEr5K6O7Y1/PZcb2/5mBSQ853CretK+otoqRrYA8Gg7z2EbNtpHxbzF/Np+i7KK8QN5gVqXPBNPgp5zmS54XnuH1VSZ8e4DZHkK/MAnd+pDNJpljYsMTSL51zBug9bpBdy26dRriz1MJqdnEZvs40WW7RV8F0h+pOiUQtNlYKoQZ5/Zs6WUo6E8k0kPzxRG49e2/kzvxV31l34wJ5Qt0FAag0iiZEP2zVYLdy5vcAfNYpIpa0vgEkD31aXegcqozgtDUk0nsFlTbT63TuAoR4XJfHh/pAPsvNaRb+mDptgcHRSSG8vX9Cco/tUK1d5XI58ku7zMgYsrzrBF4CjflsGhkM9t0s5dCAtvov227lsTPPHYNbZ1lJkWZIv5v5D/d89ftzjF/70KB/N65ExtyB3RL/CCT2IwzF9eMKZnwxkzST0H1I2ZbVdsws5zQZgWYhK0yRgaGD12aX2FElQTFzmMBjCaqlwgUHbL/5e2c6j2dNnzCJ5hpIzg2ys0wMJorFbAIbviGhzP2CK/lokaxrGTQh+LE093Ijj6wjajgyuaBXis+HvR8lwbOoUxqp+828bkA6l+2tS091VMvBMdgJmdBIorGqght+HlIVJkwqSI8Y0d5MgAki33mwQgpCLCbqNljMVdc6UFKSSC7H6zlomFrJY/FnLLG2UeXBTNXwpUNlcvdJqvTwo2JNzkPw//WJJRb4eHYddB3mOC9I2Jefj1dQo6oM61nIjGibmCvGEr+WuwfOYv7Meqk1VtZ0YSXObLveJR/Z6PAy7RMWQCh9zgTKL+tp7Nd8tMbDXByH3rYMl8LQF3sAdh9/CXzSToUGILjtR642GzXcDIZSwMy1Rdlhlf9rGlkxRuDRcc8RZN+AQIetkpFf+dv7KGYyUY9BbBRRfTHgGP4i3kwcc8VMvLVnHw1e8L4nrcW4286ySzmUowA96VXSAYgZBKQ1j/U3B0DJTA5ykswlni3pV1mFG0CFO0H8Dg+MmMcp4Mn25+HUvQjFhltgS9oKjnPWyabfFikgmWFaFIf7fpmqrd9g6QiQWb5dqtnpn13Ke4xiSjexgeK6xy+F4MwlgXAETgx9Coe25x/7+DMp6huZrgq1I3nVvv/y9X14We+fFu3/ybv6QG+B/4TCLMp0IAYEjk5eFwYnqODQMGG9X9WUh9anXnj07uwXuPLBau0KmUDBfnW3azr2c9GsFKCgJ5IyGe6VbS7olTkapC9IzlnR+AxyYzulzhV5WVCTbdiXGbushDgV81VrTI7+i6p0eIdqGCmi1FTEzTPOUtlmHJjF09PKWcU5DZ3qUdm2PNjqYJX7Dqfwr+llVLaxAqbYdTU02QjHFIS01z0+eC8d/MXnAWklUHZON6+l8NATFlusfO8VaJ+5d1vKixzoFtYb864z9BVTp91zs62znkkdfB5skQfUES52xfEju6S0VXGKYwUxS+Zdkr3SpBTCfI9cm6CXhMn7CrUhOvPArH9KKvJLGUQWOSx7yBxIJgAKnQbIO3DoJ+PdslOSLQqU/adiYrqGRy2FVBMzk7qcpD5WnRbve0BGEI5ml+GYSPom3DBk+haGITr8LuHceAJ8e0jNQGiaidx/WXCGM/R7VLTx28srujInsiMXwSbmiR4amcZwSgmvooLqG00hEPigbwEHgBy1a2CXNoFtauEry/o5gdLoSNVeggFRB98cfrJrBZ9hVOxn0xKvu6SJUw8VVzvIGuZaGYmCMPKCJ0H7XCLfe/tlGbkrz3THQqtYwGbN5x1tfCtCu16TQ4GoSK/GYx9bHuRnAO/Ts+Q2Y35n18t7DlspWShkBz+TXpfBbu6bO76LU7VZnRrKsEPajHYivBcqt4AbonqBuTNwVwxao9vT7naUi9hYKalYVR9SDk8+F/GaV3OdsBKGM4zfolg0SqQCiYw5MmM49wZhs22PVUq+8MsR9zXHgWcXj45YDRXNv9sHKmeOD7FfYcRloa1OqNlpj9pppmTuw0dMQNRJJ/YBpE3S8Yfbe+bu7GIXRrWXblOKZWyEc8wM871mUSuPIlSS41fhINau4x2ZZ3QkQGyMEJ5KRm07hEqBcTIHHvROKTMjose2gBUqdRtsVdg6BmPMZa0J3QGLUgodZpRFmKv7Z8NSCylpiO/QIWGCJFZ80EFZumjAldRnNr4TtrqeCf7xY2K7vLIa/mJ3liDte46VPgtwcVSM65k/qHCF4uyUlRF6207ka711J3P0IbRn6yg9tpkiaBQsG3lK8NfR35NKXcnE+BxVKeUjJ7HnVPwmFhsWwH0/uc+X6fL1YNWg3MVCZHU7vXPLAPmMHAIabXB2qKl5qF5e0Hmk9+sFcGHIujvAxrdliTkXCo+4bNUViXfdYE3Fg6J2xJmoK1CB3VNN0ZqUC84KKzYmyEMFtYLESoHDBXBwnK+hns7O0BJtj8ThLqE4/BczKF57foCmFdXUHXz75ebtSuuKEddW6vxZJtoKen/EeVyBqarHXpGriYiVU2yDe8dOOyGUN3iQuHJIiQQ+WiDLBvM7ZmzW5BzAb8ESQnqPnrEd07mZdq0Ep5hw0Gn2Bx7Nv5OT3p3DJQGVDeaP2jPXWOOYEhThyTyGBUfaMjj23IxLlsJtmth0WoP4ThNMhjXicnYLSFh4bFL1vqTbQ4Vtc5R7hNUgtHKMemGUadlY07P4JygaAsoXlhsJfERiq9jcfyM3PjmkceHhGJ8CO5pnIDzMl5ZemM4M08iXPPXuNWQ7H/BVM1M/CcZluWrxN9qTimbYk9bgMBnDfS0hz00G6xmq3YpsXkE6hj9nW3zjBqZ9QBnsOX05cedWVTj1m7LHYdWppp72bfW+1PNwVkgH40EHBBj8b4jG9CwVJqd51Juw/hqzQlWAkLQrAf0EZb0pjD9Waft/q/Rxx/lvvkgsj6X1gGZkSlYEIpD72DYu66lrT/jqA/nEeql5MPFvkOiOBm+W3x5+gPTXxFQJKv7ZGeMssucfWYIBUDqYRbnvVD0u+X1fIxVyvrXMMVwCkBuFBgVQAaNBhjL/53YZSw5qD6hGQ8ZwPutcrF5qC+01W9iW6/Wp3LWQY/E3Dx3YQwyr1jT1ixUe6t3Vf6WvoAMOS2op80OAINTmqWVO1+ICWWcZL0JiDuHN1VIdNQMTH7/8XvjnSyz79JZ0ehJqCVkh+C9hFMpL567kSV5GXudcACZg+fU3ulElEFuOnf60jYlnbKlJJQSwcIXuBTCrXEAAAAhAEAUEsDBBQACQAIAKhILVYA9HpVPwAAAEAAAAAtABwANTRiYmVhMzViMDk1ZGRmZTk3NDBkZjk3YjY5MzYyN2IuZmlsZW5hbWUudHh0VVQJAAPMHsFjzB7BY3V4CwABBCEAAAAEIQAAALB0aARJCSRMXDBc3wtx3i0jKEIZR7D9eB/ht2DsQqzOEwTNnVWe/csrm9mtkKv4nefcEhqLW/Ix4tVTNmoN4FBLBwgA9HpVPwAAAEAAAABQSwECHgMUAAkACACoSC1WXuBTCrXEAAAAhAEAIAAYAAAAAAAAAAAApIEAAAAANTRiYmVhMzViMDk1ZGRmZTk3NDBkZjk3YjY5MzYyN2JVVAUAA8wewWN1eAsAAQQhAAAABCEAAABQSwECHgMUAAkACACoSC1WAPR6VT8AAABAAAAALQAYAAAAAAABAAAApIEfxQAANTRiYmVhMzViMDk1ZGRmZTk3NDBkZjk3YjY5MzYyN2IuZmlsZW5hbWUudHh0VVQFAAPMHsFjdXgLAAEEIQAAAAQhAAAAUEsFBgAAAAACAAIA2QAAANXFAAAAAA==' AND file:content_ref.x_misp_filename = '61aae0e18c41ec4f610676680d26f6c6e1d4d5aa4e5092e40915fe806b679cd4' AND file:content_ref.hashes.MD5 = '54bbea35b095ddfe9740df97b693627b' AND file:content_ref.mime_type = 'application/zip' AND file:content_ref.encryption_algorithm = 'mime-type-indicated' AND file:content_ref.decryption_key = 'infected') AND file:x_misp_entropy = '6.1352969019206' AND file:x_misp_mimetype = 'PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:05:16Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "file"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"file\"",
|
|
"misp:meta-category=\"file\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9ec6fbe0-8d11-447a-a038-f6b0a86b9814",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:18:36.000Z",
|
|
"modified": "2023-01-13T09:18:36.000Z",
|
|
"pattern": "[(network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '172.247.168.153') AND network-traffic:dst_port = '8033']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:18:36Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "network"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"ip-port\"",
|
|
"misp:meta-category=\"network\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3e84fef6-6655-46a8-9a74-2e05e651c3d2",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:20:17.000Z",
|
|
"modified": "2023-01-13T09:20:17.000Z",
|
|
"pattern": "[(network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.36.119.61') AND network-traffic:dst_port = '8443' AND network-traffic:dst_port = '444']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:20:17Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "network"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"ip-port\"",
|
|
"misp:meta-category=\"network\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--32d28275-7f48-4b1e-90cc-285cbeee0a0c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:21:34.000Z",
|
|
"modified": "2023-01-13T09:21:34.000Z",
|
|
"pattern": "[(network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.131.189.143') AND network-traffic:dst_port = '30080' AND network-traffic:dst_port = '30081' AND network-traffic:dst_port = '30443' AND network-traffic:dst_port = '20443']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:21:34Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "network"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"ip-port\"",
|
|
"misp:meta-category=\"network\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--4919dc52-6dd4-4e94-839a-a1f0a955c307",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:22:14.000Z",
|
|
"modified": "2023-01-13T09:22:14.000Z",
|
|
"pattern": "[(network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.34.130.40') AND network-traffic:dst_port = '444']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:22:14Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "network"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"ip-port\"",
|
|
"misp:meta-category=\"network\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--961a77bc-6824-49ae-815c-efb178e8e1b4",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:25:25.000Z",
|
|
"modified": "2023-01-13T09:25:25.000Z",
|
|
"labels": [
|
|
"misp:name=\"file\"",
|
|
"misp:meta-category=\"file\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "state",
|
|
"value": "Malicious",
|
|
"category": "Other",
|
|
"uuid": "a746a583-7902-4cfb-8ea4-179104290eec"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "fullpath",
|
|
"value": "/data/lib/libips.bak",
|
|
"category": "Other",
|
|
"uuid": "96d1f70a-aa11-44fe-9bae-b715d4927109"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "fullpath",
|
|
"value": "/data/lib/libgif.so",
|
|
"category": "Other",
|
|
"uuid": "e6436492-3dc5-4bd6-815b-caa60dcad202"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "fullpath",
|
|
"value": "/data/lib/libiptcp.so",
|
|
"category": "Other",
|
|
"uuid": "0cab46d9-5e32-4525-b21d-04f54b46cbff"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "fullpath",
|
|
"value": "/data/lib/libipudp.so",
|
|
"category": "Other",
|
|
"uuid": "d7932f54-07a2-41bb-b81e-4608cc75d39a"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "fullpath",
|
|
"value": "/data/lib/libjepg.so",
|
|
"category": "Other",
|
|
"uuid": "f66e9dde-c15a-45cd-bf6f-784c0457ab7b"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "fullpath",
|
|
"value": "/var/.sslvpnconfigbk",
|
|
"category": "Other",
|
|
"uuid": "11efedea-9665-4347-88a6-b3d540aa2e8a"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "fullpath",
|
|
"value": "/data/etc/wxd.conf",
|
|
"category": "Other",
|
|
"uuid": "622c1a0f-3d5f-49c7-8e6e-6a78248276d6"
|
|
},
|
|
{
|
|
"type": "text",
|
|
"object_relation": "fullpath",
|
|
"value": "/flash",
|
|
"category": "Other",
|
|
"uuid": "0c217051-2182-4c9f-a704-14b250a8b9f5"
|
|
}
|
|
],
|
|
"x_misp_comment": "Presence of the following artifacts in the filesystem:",
|
|
"x_misp_meta_category": "file",
|
|
"x_misp_name": "file"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3547fe3b-4672-41f8-8b87-dd3754d7aeeb",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:05:16.000Z",
|
|
"modified": "2023-01-13T09:05:16.000Z",
|
|
"pattern": "[file:extensions.'windows-pebinary-ext'.number_of_sections = '9' AND file:extensions.'windows-pebinary-ext'.pe_type = 'exe' AND file:extensions.'windows-pebinary-ext'.optional_header.address_of_entry_point = '4199600' AND file:extensions.'windows-pebinary-ext'.x_misp_compilation_timestamp = '2021-08-26T07:13:04+00:00' AND file:extensions.'windows-pebinary-ext'.x_misp_internal_filename = 'AC file name' AND file:extensions.'windows-pebinary-ext'.x_misp_file_description = 'AC Description' AND file:extensions.'windows-pebinary-ext'.x_misp_file_version = '1.0' AND file:extensions.'windows-pebinary-ext'.x_misp_lang_id = '080904E4' AND file:extensions.'windows-pebinary-ext'.x_misp_product_name = 'AC' AND file:extensions.'windows-pebinary-ext'.x_misp_product_version = '1.0' AND file:extensions.'windows-pebinary-ext'.x_misp_company_name = 'AC Company' AND file:extensions.'windows-pebinary-ext'.x_misp_legal_copyright = 'AC copyright']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2023-01-13T09:05:16Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "file"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:name=\"pe\"",
|
|
"misp:meta-category=\"file\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--060f92b1-3a95-49fd-b14f-e33adbd2115b",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:05:15.000Z",
|
|
"modified": "2023-01-13T09:05:15.000Z",
|
|
"labels": [
|
|
"misp:name=\"pe-section\"",
|
|
"misp:meta-category=\"file\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "name",
|
|
"value": ".text",
|
|
"category": "Other",
|
|
"uuid": "e7bb1fd2-36d5-4863-b17f-42d75904e58e"
|
|
},
|
|
{
|
|
"type": "size-in-bytes",
|
|
"object_relation": "size-in-bytes",
|
|
"value": "80896",
|
|
"category": "Other",
|
|
"uuid": "0e9f763e-140d-4d66-a757-4ac6c5df334c"
|
|
},
|
|
{
|
|
"type": "float",
|
|
"object_relation": "entropy",
|
|
"value": "6.1933439370956",
|
|
"category": "Other",
|
|
"uuid": "a112ff46-43d1-46fb-98cf-7d1b252f53a2"
|
|
},
|
|
{
|
|
"type": "md5",
|
|
"object_relation": "md5",
|
|
"value": "4b5de9374a615b76e607c1dc4d17ac72",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "727306a3-783a-45b8-ae8e-48dc9139cadd"
|
|
},
|
|
{
|
|
"type": "sha1",
|
|
"object_relation": "sha1",
|
|
"value": "92a4ea254751b960250b21d8f8e947eb769ef01a",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "34c210a9-8b14-4068-8aa7-2a056825a360"
|
|
},
|
|
{
|
|
"type": "sha256",
|
|
"object_relation": "sha256",
|
|
"value": "5f826a78d3d88061f3f7e3281ffc41b37a8071a217cd15b584e4f6edd909b23c",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "8d7dbb00-c7ce-4bf9-ae08-82f90440ae70"
|
|
},
|
|
{
|
|
"type": "sha512",
|
|
"object_relation": "sha512",
|
|
"value": "b208b7a03e8036c27f09f43fc1f46fa7343c3a62efe0aa554908ac6426df1783d694638e135ef71b85cb8544e4da37d6a03cb6e923848a492016d688f1ddf5a2",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "d02b29e1-aaa0-49c9-8df8-82f6fe67bcbe"
|
|
},
|
|
{
|
|
"type": "ssdeep",
|
|
"object_relation": "ssdeep",
|
|
"value": "1536:MzT7zQBr/zINrQlKQLvTYZuyjOzNSHCCiin0F7KLzfLXDvbnT/r3jP7HzL/3zXvW:MzT/0/ENklKQLrAuyaxSHC5inA+LzfL6",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "04c733f2-a876-4fc5-a5ce-5dbb1bdf9728"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "file",
|
|
"x_misp_name": "pe-section"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--2f9cb5df-616d-4aa3-b759-2312259e013a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:05:15.000Z",
|
|
"modified": "2023-01-13T09:05:15.000Z",
|
|
"labels": [
|
|
"misp:name=\"pe-section\"",
|
|
"misp:meta-category=\"file\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "name",
|
|
"value": ".data",
|
|
"category": "Other",
|
|
"uuid": "3d0c000e-3d10-41ac-98d0-edfed05c7848"
|
|
},
|
|
{
|
|
"type": "size-in-bytes",
|
|
"object_relation": "size-in-bytes",
|
|
"value": "2560",
|
|
"category": "Other",
|
|
"uuid": "e9661fd2-6e1e-4e68-9851-4ea518ec3d89"
|
|
},
|
|
{
|
|
"type": "float",
|
|
"object_relation": "entropy",
|
|
"value": "0.6540748833811",
|
|
"category": "Other",
|
|
"uuid": "9dbc8653-6947-4fd8-981c-99ed03427aa6"
|
|
},
|
|
{
|
|
"type": "md5",
|
|
"object_relation": "md5",
|
|
"value": "7ea63e83e1c0f8b6dc4ef536699484dd",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "0ba25daf-1ff1-4b72-8972-446c93b893f7"
|
|
},
|
|
{
|
|
"type": "sha1",
|
|
"object_relation": "sha1",
|
|
"value": "3326c3c5793f7f3510ef415f14b3db4b62e27bd2",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "4bb3fd53-5738-45a3-a935-0f7944bb9c1b"
|
|
},
|
|
{
|
|
"type": "sha256",
|
|
"object_relation": "sha256",
|
|
"value": "89ec50c88cda5557005116ac06d514df68f12d2c0bf29773b20589814ab9723f",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "c0c6126e-0ddf-47ed-92bf-fee96c54251a"
|
|
},
|
|
{
|
|
"type": "sha512",
|
|
"object_relation": "sha512",
|
|
"value": "09403f1bf4e83bb72db252de42b2c8bddd29ba99557115466f02ac668b6d6074a0883f597f6c0e7613bf00900af6163a1ee0a204a09bcb1e497c2a8eb29664d5",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "6f53837d-928a-4b54-84fa-99a6b11e538c"
|
|
},
|
|
{
|
|
"type": "ssdeep",
|
|
"object_relation": "ssdeep",
|
|
"value": "6:Xmt/eLtlMQQ/wm+RxlXOfUKjyipKR9jHUAj/k1Aj/k1qa6Ul:XmtGplsF+Rj7xfkAA1AA19",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "cc8db82e-412d-418e-bb6e-9d8f95b5d023"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "file",
|
|
"x_misp_name": "pe-section"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--a8529e6e-6cfa-4786-a272-086dc1106dd2",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:05:15.000Z",
|
|
"modified": "2023-01-13T09:05:15.000Z",
|
|
"labels": [
|
|
"misp:name=\"pe-section\"",
|
|
"misp:meta-category=\"file\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "name",
|
|
"value": ".rdata",
|
|
"category": "Other",
|
|
"uuid": "b8384a3d-3278-4c86-9614-6b1dd8ebd607"
|
|
},
|
|
{
|
|
"type": "size-in-bytes",
|
|
"object_relation": "size-in-bytes",
|
|
"value": "5120",
|
|
"category": "Other",
|
|
"uuid": "282e9121-898f-461b-89fe-ee74a686dca6"
|
|
},
|
|
{
|
|
"type": "float",
|
|
"object_relation": "entropy",
|
|
"value": "5.4635139902349",
|
|
"category": "Other",
|
|
"uuid": "2f687329-70e3-4cb4-994c-f2ae46f0145a"
|
|
},
|
|
{
|
|
"type": "md5",
|
|
"object_relation": "md5",
|
|
"value": "e4c9d495339c4a934cc1b935660e0e38",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "01b4507e-7822-4c32-bbef-f38583f11150"
|
|
},
|
|
{
|
|
"type": "sha1",
|
|
"object_relation": "sha1",
|
|
"value": "037f98546890d032d441763d9e3bc1de54ffbbc0",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "805c0a79-84ce-4578-8e1b-3efbadf1e1ce"
|
|
},
|
|
{
|
|
"type": "sha256",
|
|
"object_relation": "sha256",
|
|
"value": "336ea8b9b38f4d53ad336eec0b0e1e03b59955194a5f37a15b0ae1fc80b4f061",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "6bef110b-bb2c-40db-ac48-e28e7d72720c"
|
|
},
|
|
{
|
|
"type": "sha512",
|
|
"object_relation": "sha512",
|
|
"value": "3bf3cac0891b015a26d18090219d445c48bbdc89eeac878cfcffb393b8b33296317aa7bc5f12d6f1498429807424f8c3e3ab249b273b270607bbffe83b5f9a75",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "8c0a496f-5a62-4c16-99c7-8843cd2f87e0"
|
|
},
|
|
{
|
|
"type": "ssdeep",
|
|
"object_relation": "ssdeep",
|
|
"value": "48:X65hlRWXMFfHP7BEP+sx4OQQuQv2qjr5vh8MMy9D/DtyGbBbBbBbBbBbBbBbBbBP:qLrmMF/SP+GuQv2qHLd9DhX",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "960db690-e673-43f1-bbda-24285d0d0b99"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "file",
|
|
"x_misp_name": "pe-section"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--c10402d1-6766-4ab4-8509-f157c123b61c",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:05:15.000Z",
|
|
"modified": "2023-01-13T09:05:15.000Z",
|
|
"labels": [
|
|
"misp:name=\"pe-section\"",
|
|
"misp:meta-category=\"file\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "name",
|
|
"value": ".bss",
|
|
"category": "Other",
|
|
"uuid": "7c2df5c6-4b3f-4d1c-a5f7-823cfe281da7"
|
|
},
|
|
{
|
|
"type": "size-in-bytes",
|
|
"object_relation": "size-in-bytes",
|
|
"value": "0",
|
|
"category": "Other",
|
|
"uuid": "15dfb76d-f355-49f3-97dc-bc3c45d830df"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "file",
|
|
"x_misp_name": "pe-section"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--b3922ef0-5926-4bcf-b1c5-622a6742dcec",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:05:15.000Z",
|
|
"modified": "2023-01-13T09:05:15.000Z",
|
|
"labels": [
|
|
"misp:name=\"pe-section\"",
|
|
"misp:meta-category=\"file\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "name",
|
|
"value": ".idata",
|
|
"category": "Other",
|
|
"uuid": "98de02a5-8133-4375-b702-f606b6efcd48"
|
|
},
|
|
{
|
|
"type": "size-in-bytes",
|
|
"object_relation": "size-in-bytes",
|
|
"value": "4096",
|
|
"category": "Other",
|
|
"uuid": "f1e21f9f-3e57-49c0-8bd2-02694064057e"
|
|
},
|
|
{
|
|
"type": "float",
|
|
"object_relation": "entropy",
|
|
"value": "5.2099581938208",
|
|
"category": "Other",
|
|
"uuid": "4edf59fd-77c7-4da0-9654-140008f38358"
|
|
},
|
|
{
|
|
"type": "md5",
|
|
"object_relation": "md5",
|
|
"value": "4f2bf103dfcc95692a488edab688bbc7",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "1ad115ba-9135-48b2-aa20-803f6cc64c5c"
|
|
},
|
|
{
|
|
"type": "sha1",
|
|
"object_relation": "sha1",
|
|
"value": "b2d25fd8efd7b824c2912a9f80c918fe1f11952d",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "dc32eb3c-6165-443e-89cf-20fab39e55be"
|
|
},
|
|
{
|
|
"type": "sha256",
|
|
"object_relation": "sha256",
|
|
"value": "f60d590bc286bc3357f693500e25f8d13699f93402c384ea3354ee694ad6abb2",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "96713c7e-9b9d-4d42-8be7-0e9ce32d592d"
|
|
},
|
|
{
|
|
"type": "sha512",
|
|
"object_relation": "sha512",
|
|
"value": "b9a44e91d89c9586694f575a54eb41db7e2dc7f1097a1470470e6df077747c024dae28ae828b572e400d35e0b0957b31f3e54fd8f2a9f5fc64e6f1729fbe423d",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "f7625501-88f3-47b8-9622-94aed9790d12"
|
|
},
|
|
{
|
|
"type": "ssdeep",
|
|
"object_relation": "ssdeep",
|
|
"value": "48:VYTBshkXzByshkXzByr3mPWXEDll6GraRBTuyK1uA9GFDkcMUuRVxGp:yy4W+s/zuBTfK1uA9SDkcMUuRVq",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "78dfc026-71fe-49b7-9474-b5face8bf6c0"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "file",
|
|
"x_misp_name": "pe-section"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--1d1e1173-a0cf-4808-a2ee-51234b20e355",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:05:15.000Z",
|
|
"modified": "2023-01-13T09:05:15.000Z",
|
|
"labels": [
|
|
"misp:name=\"pe-section\"",
|
|
"misp:meta-category=\"file\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "name",
|
|
"value": ".CRT",
|
|
"category": "Other",
|
|
"uuid": "f06bd361-ad6e-4779-8862-a9fd1abee749"
|
|
},
|
|
{
|
|
"type": "size-in-bytes",
|
|
"object_relation": "size-in-bytes",
|
|
"value": "512",
|
|
"category": "Other",
|
|
"uuid": "50f064df-82de-4a32-818c-1a71f6092f29"
|
|
},
|
|
{
|
|
"type": "float",
|
|
"object_relation": "entropy",
|
|
"value": "1.6185253040527",
|
|
"category": "Other",
|
|
"uuid": "3ea9ab4b-e55d-42d5-9939-f1e5defefeeb"
|
|
},
|
|
{
|
|
"type": "md5",
|
|
"object_relation": "md5",
|
|
"value": "3312975753899c136a2cba9b13c60ad0",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "4bbcbe4d-06d5-4b3f-80b7-7c5e21d0a4dd"
|
|
},
|
|
{
|
|
"type": "sha1",
|
|
"object_relation": "sha1",
|
|
"value": "6bb845d70432ae6f16002393f1ed36d3f5ff826e",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "2db1b968-e3a6-47d0-bd2f-56f7edcc1ba1"
|
|
},
|
|
{
|
|
"type": "sha256",
|
|
"object_relation": "sha256",
|
|
"value": "fc607709d7ac5011094efd7565647ad4dfd793c9f57a0e949f25bf2d241fcbad",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "f08350ee-0eb2-4811-84a0-628cf2cbd6a8"
|
|
},
|
|
{
|
|
"type": "sha512",
|
|
"object_relation": "sha512",
|
|
"value": "16ce5aeea206f79e4b26341705b451df52c492bbd7ca0d7bab47e9d3230f881a36d5ab27311f56d4dc4f580951eda3759e978b1db2240283762e44f13509da7c",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "155f634e-fa59-47d6-b9cf-a620f7f498f0"
|
|
},
|
|
{
|
|
"type": "ssdeep",
|
|
"object_relation": "ssdeep",
|
|
"value": "3:+/tdFllXl6ltl/ll:N",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "9b3ab4e9-16f3-4e3e-8628-ddadc03dd9f9"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "file",
|
|
"x_misp_name": "pe-section"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--2c07d192-0cfc-44d7-a50d-ba5e19f39d8a",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:06:37.000Z",
|
|
"modified": "2023-01-13T09:06:37.000Z",
|
|
"labels": [
|
|
"misp:name=\"pe-section\"",
|
|
"misp:meta-category=\"file\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "name",
|
|
"value": ".tls",
|
|
"category": "Other",
|
|
"uuid": "e6a28091-a0f1-4178-9cc8-523ade686c07"
|
|
},
|
|
{
|
|
"type": "size-in-bytes",
|
|
"object_relation": "size-in-bytes",
|
|
"value": "512",
|
|
"category": "Other",
|
|
"uuid": "eccebb87-6d3e-4670-9d2d-72516cdf095f"
|
|
},
|
|
{
|
|
"type": "md5",
|
|
"object_relation": "md5",
|
|
"value": "7dea362b3fac8e00956a4952a3d4f474",
|
|
"category": "Payload delivery",
|
|
"uuid": "f9496589-7caf-4f02-ad9d-6d6efd4507f6"
|
|
},
|
|
{
|
|
"type": "sha1",
|
|
"object_relation": "sha1",
|
|
"value": "05fe405753166f125559e7c9ac558654f107c7e9",
|
|
"category": "Payload delivery",
|
|
"uuid": "4dab0373-5c41-49f9-8c6c-fb9eac072c8b"
|
|
},
|
|
{
|
|
"type": "sha256",
|
|
"object_relation": "sha256",
|
|
"value": "af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc",
|
|
"category": "Payload delivery",
|
|
"uuid": "33ffc6c1-6f6c-48ae-b896-329f05ad4e04"
|
|
},
|
|
{
|
|
"type": "sha512",
|
|
"object_relation": "sha512",
|
|
"value": "1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b",
|
|
"category": "Payload delivery",
|
|
"uuid": "8583b84e-ed12-4cb1-8b74-4424a17fbe2f"
|
|
},
|
|
{
|
|
"type": "ssdeep",
|
|
"object_relation": "ssdeep",
|
|
"value": "3::",
|
|
"category": "Payload delivery",
|
|
"uuid": "caa672a1-4b89-4110-b2de-2a070e98de05"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "file",
|
|
"x_misp_name": "pe-section"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--3b93ed78-8588-44e1-9900-13cfd51d57e8",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:05:15.000Z",
|
|
"modified": "2023-01-13T09:05:15.000Z",
|
|
"labels": [
|
|
"misp:name=\"pe-section\"",
|
|
"misp:meta-category=\"file\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "name",
|
|
"value": ".rsrc",
|
|
"category": "Other",
|
|
"uuid": "225b9a26-fcd0-4ec1-bb00-7dd968a65f4d"
|
|
},
|
|
{
|
|
"type": "size-in-bytes",
|
|
"object_relation": "size-in-bytes",
|
|
"value": "2048",
|
|
"category": "Other",
|
|
"uuid": "16d1c894-557a-4a9f-870f-0329d9c8b812"
|
|
},
|
|
{
|
|
"type": "float",
|
|
"object_relation": "entropy",
|
|
"value": "4.6724534459793",
|
|
"category": "Other",
|
|
"uuid": "aa3f4d55-21af-40b0-bce3-96f4a4a3d2e0"
|
|
},
|
|
{
|
|
"type": "md5",
|
|
"object_relation": "md5",
|
|
"value": "e3e643d996d7a5984b5ac6bea5f8ad4b",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "5f0c4135-154a-4043-b185-84f4f4b73312"
|
|
},
|
|
{
|
|
"type": "sha1",
|
|
"object_relation": "sha1",
|
|
"value": "d6d79694a79924624fcc1f89853e45cc0024d1e4",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "e829e0d5-917c-470f-8d25-bf519aa053a8"
|
|
},
|
|
{
|
|
"type": "sha256",
|
|
"object_relation": "sha256",
|
|
"value": "10fa569b3cf75ff21ea3b433416d16d9ff53bb127bcb8dfe24b4aea6bea0b684",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "a7080397-14dc-418f-8f61-de80d7827b5b"
|
|
},
|
|
{
|
|
"type": "sha512",
|
|
"object_relation": "sha512",
|
|
"value": "20085231c5480a9c6617d05b3d028f492a8f48f1b18bf6be5826ffa01774e696c283df4fbbc77a7f978d7f49c7155065419db2e2613a833d5c3b5b98842157ca",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "c3383d8c-346f-441b-a23b-ed97f7e90608"
|
|
},
|
|
{
|
|
"type": "ssdeep",
|
|
"object_relation": "ssdeep",
|
|
"value": "24:b9pGZeFVJprKNZ1bh3lCPNWredtn3tcuf3hwcK:Bp/FVnrcLbRlOBh3tThi",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "2f2b6635-98d9-488a-997a-9a0d7aebdb25"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "file",
|
|
"x_misp_name": "pe-section"
|
|
},
|
|
{
|
|
"type": "x-misp-object",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-object--47345dc1-759f-4d34-997a-79c8a0ff8600",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:05:16.000Z",
|
|
"modified": "2023-01-13T09:05:16.000Z",
|
|
"labels": [
|
|
"misp:name=\"pe-section\"",
|
|
"misp:meta-category=\"file\""
|
|
],
|
|
"x_misp_attributes": [
|
|
{
|
|
"type": "text",
|
|
"object_relation": "name",
|
|
"value": ".reloc",
|
|
"category": "Other",
|
|
"uuid": "a1fe38da-7f11-444f-8ff2-66b76715dbba"
|
|
},
|
|
{
|
|
"type": "size-in-bytes",
|
|
"object_relation": "size-in-bytes",
|
|
"value": "2560",
|
|
"category": "Other",
|
|
"uuid": "ad77b0b6-cc28-48b1-9f59-bffed8093589"
|
|
},
|
|
{
|
|
"type": "float",
|
|
"object_relation": "entropy",
|
|
"value": "6.5454664509897",
|
|
"category": "Other",
|
|
"uuid": "5f4c2d8e-ebb8-46a6-80b3-c2fe6d85ed27"
|
|
},
|
|
{
|
|
"type": "md5",
|
|
"object_relation": "md5",
|
|
"value": "927d3c8f39932c4903ce0ae8dc4d7abb",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "21de482b-a7cf-4762-a839-d28ac606e45c"
|
|
},
|
|
{
|
|
"type": "sha1",
|
|
"object_relation": "sha1",
|
|
"value": "512ed9db2fe4151324abf949d70deb3fe4566a66",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "850e849c-073d-4850-9af2-169e36f697dc"
|
|
},
|
|
{
|
|
"type": "sha256",
|
|
"object_relation": "sha256",
|
|
"value": "a9506a3cbf332502d62d7b7fc0849fde3809545a75d911e9cae9268fa143b32c",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "5f4e9726-098a-4733-8d67-0478a381b09a"
|
|
},
|
|
{
|
|
"type": "sha512",
|
|
"object_relation": "sha512",
|
|
"value": "2263a71d4f9ee005ed301020ae0e0d974003a39d481f4a82b6899a47847888969a6d66b7c585598307c14c83cc97f744b6f2dc0158426e2628ed02114ac5f338",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "ff7530a2-7124-412c-98c8-c409141da557"
|
|
},
|
|
{
|
|
"type": "ssdeep",
|
|
"object_relation": "ssdeep",
|
|
"value": "48:+BXwIRwsB3qZRyxbFCh3vvvbvXIdruBHnHofSX3X3X:+1wIRwsWGCzvXk8HofSnH",
|
|
"category": "Payload delivery",
|
|
"to_ids": true,
|
|
"uuid": "25566b15-5d61-46a8-a2bd-4767edcfd05b"
|
|
}
|
|
],
|
|
"x_misp_meta_category": "file",
|
|
"x_misp_name": "pe-section"
|
|
},
|
|
{
|
|
"type": "note",
|
|
"spec_version": "2.1",
|
|
"id": "note--54ae3ae3-3b28-48d2-8aa3-b65955287a9d",
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
|
"created": "2023-01-13T09:30:53.000Z",
|
|
"modified": "2023-01-13T09:30:53.000Z",
|
|
"abstract": "Report from - https://www.fortinet.com/blog/psirt-blogs/analysis-of-fg-ir-22-398-fortios-heap-based-buffer-overflow-in-sslvpnd (1673602179)",
|
|
"content": "# PSIRT Blogs\r\n\r\n # Analysis of FG-IR-22-398 \u2013 FortiOS - heap-based buffer overflow in SSLVPNd\r\n By Carl Windsor, Guillaume Lovet, Hongkei Chan, and Alex Kong | January 11, 2023 **Affected Platforms:** FortiOS \r\n \r\n **Impacted Users:** Government &large organizations \r\n **Impact:** Data loss and OS and file corruption \r\n **Severity Level:** High\r\n\r\n Fortinet has published CVSS: Critical advisory FG-IR-22-398 / CVE-2022-42475 on Dec 12, 2022. The following writeup details our initial investigation into this malware and additional IoCs identified during our ongoing analysis.\r\n\r\n ## Executive Summary\r\n\r\n \r\n * Multiple additional IoCs have been uncovered related to the incident FG-IR-22-398 / CVE-2022-42475\r\n * The complexity of the exploit suggests an advanced actor and that it is highly targeted at governmental or government-related targets.\r\n \r\n ## Incident Analysis\r\n\r\n As mentioned in the advisory, we detected this issue in the wild and were able to collect a sample of the malware along with related network traffic.\r\n\r\n The malware was a variant of a generic Linux implant customized for FortiOS. The following information was gathered during the forensic filesystem and binary analysis of the received appliance.\r\n\r\n **Libips.bak**\r\n\r\n The suspicious binary was located at */data/lib/libips.bak*. This file may be masquerading as a component of Fortinet\u2019s IPS Engine, located at /data/lib/libips.so. The file /data/lib/libips.so was present, but with a zero file size.\r\n\r\n Here is an image of the /data/lib directory:\r\n\r\n **Libgif.so, libips.bak,** and **libiptcp.so** are not part of any FortiOS components or processes.\r\n\r\n **Libips.bak** appears to be a trojanized version of the IPS Engine, typically located at ***/data/lib/libips.so*.** A diff comparing ***libips.bak*** with a clean **libips.so** from the same FortiOS build was performed. Up to about the 0x1900 byte mark, the files differ. After that point, the files are identical. Below is a screenshot of **libips.bak** (top) and the clean **libips.so** (bottom). ***libips.bak*** contains data where **libips.so** does not.\r\n\r\n After the first ~0x1900 bytes, the files are identical.\r\n\r\n **Libips.bak** exports the functions **ips\\_so\\_patch\\_urldb** and **ips\\_so\\_query\\_interface**. These are the same exports in the clean IPS engine binary, libips.so. Both exported functions lead to the same malicious code. If **libps.bak** is named libips.so in the **/data/lib** directory, the malicious code will be executed automatically as components of FortiOS will call these exported functions. The binary does not attempt to return to the clean IPS engine code, so IPS functionality is also compromised. Below is an example export function that immediately calls the malicious code.\r\n\r\n The primary malicious code is shown below.\r\n\r\n The malicious code begins by looping through file descriptors from 3 to 255. If it can duplicate the file descriptors, it will close both the duplicate and original descriptors.\r\n\r\n Next, it will read from **/data/lib/libiptcp.so** and write the data to **/data/lib/libjepg.so. /data/lib/libjepg.so** is renamed as **/data/lib/libips.so. fork()** andis used multiple times initially as an anti-debugging technique.\r\n\r\n It then calls **fork()** once more. The child process reads from **/data/lib/libgif.so** and writes that data to **/data/lib/libjepg.so. /data/lib/libjepg.so** is then renamed as **/data/lib/libips.so.**\r\n\r\n The parent process checks for read access to **/var/.sslvpnconfigbk**. This file is opened, then closed immediately. Finally, **/data/lib/libipudp.so** is executed with the argument **\"/data/lib/libipudp.so\"**.\r\n\r\n The files referenced in this code\u2014**libiptcp.so, libgif.so, .sslvpnconfigbk,** and **libipudp.so\u2014**could not be recovered.\r\n\r\n **Wxd.conf**\r\n\r\n The format of this config file is similar to that of \"Fast reverse proxy\u201d found at https://github.com/fatedier/frp. This tool is described as \"a fast reverse proxy to help you expose a local server behind a NAT or firewall to the Internet.\"\r\n\r\n There are records for the server IP address in logs. It sends traffic to the server's ports 80, 443, and 444. Traffic is sent to a server with the address 188[.]34[.]130[.]40.\r\n\r\n ## Packet Capture Analysis\r\n\r\n Network packet captures obtained and analyzed by the FortiGuard Labs Threat Research Team identified suspicious traffic headed to 103[.]131[.]189[.]143. The major findings of this analysis are highlighted below.\r\n\r\n ### 103[.]131[.]189[.]143\r\n\r\n Communications with the suspicious IP 103[.]131[.]189[.]143 server served two primary purposes:(1) downloading payloads and (2) receiving and executing commands. Payloads were hosted on 103[.]131[.]189[.]143 using a Python (SimpleHTTP) server listening on port: 30080.\r\n\r\n The FortiGuard Labs Threat Research team was unable to recover the payloads because the packet captures were largely truncated or missing.\r\n\r\n ### TCP Stream 1894\r\n\r\n TCP stream 1894 contained the connection made to 103[.]131[.]189[.]143 listening on port 30443, which was an interactive shell session.\r\n\r\n ## Post Incident Meta Data Investigation\r\n\r\n Through our detailed investigation of the PCAPs, an additional IoC was uncovered.\r\n\r\n 185[.]174[.]136[.]20\r\n\r\n The identification of this IoC led to a folder on the server containing binaries built specifically for relevant FortiGate hardware versions.\r\n\r\n Using a Yara Rule created by the FortiGuard Threat Research Team, we were able to hunt for similar file samples. This also allowed us to identify the **/var/w** files that were seen executed in the PCAPs but not obtained directly from the file system.\r\n\r\n ### Sample Analysis\r\n\r\n From the analysis of the collected **/var/w files** samples, we found that the attacker uses advanced capabilities to manipulate FortiOS logging, as follows:\r\n\r\n \r\n * The malware patches the logging processesof FortiOS to manipulate logs to evade detection. \u2013 */bin/miglogd* & */bin/syslogd*\r\n * It includes offsets and opcodes for 27 FortiGate models and version pairs. The malware opens a handle to the processes and injects data into them.\r\n\t + Versions range from 6.0.5 to 7.2.1\r\n\t + Models are FG100F, FG101F, FG200D, FG200E, FG201F, FG240D, FG3H0E, FG5H0E, FG6H1E, FG800D, FGT5HD, FGT60F, FGT80F. \r\n * The malware can manipulate log files. It searches for elog files, which are logs of events in FortiOS. After decompressing them in memory, it searches for a string the attacker specifies, deletes it, and reconstructs the logs.\r\n * The malware can also kill the logging processes.\r\n \r\n By emulating the malware's execution, we found a unique string of bytes in its communication with its command & control server **that can be used for an IPS signature.** \r\n\r\n \r\n * This string detects the TLS traffic by the TLS request header. \r\n * The buffer \u201c\\x00\\x0C\\x08http/1.1\\x02h2\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0Fwww.example.com\u201d (unescaped) should appear inside the \u201cClient Hello\u201d packet.\r\n \r\n ## IOCs\r\n\r\n The following network indicators were found as part of the original and supplemental analysis (original IoCs are bolded). For details on how to search on your FortiGate device for evidence of these indicators, see the following Knowledgebase Article.\r\n\r\n ### Filenames\r\n\r\n Presence of the following artifacts in the filesystem:\r\n\r\n **/data/lib/libips.bak**\r\n\r\n **/data/lib/libgif.so**\r\n\r\n **/data/lib/libiptcp.so**\r\n\r\n **/data/lib/libipudp.so**\r\n\r\n **/data/lib/libjepg.so**\r\n\r\n **/var/.sslvpnconfigbk**\r\n\r\n **/data/etc/wxd.conf**\r\n\r\n **/flash**\r\n\r\n ### IP/Domains\r\n\r\n **High Confidence**\r\n\r\n **188[.]34[.]130[.]40 (port 444 observed)**\r\n\r\n **103[.]131[.]189[.]143 (ports 30080,30081,30443,20443 observed)**\r\n\r\n **192[.]36[.]119[.]61 (ports 8443,444 observed)**\r\n\r\n **172[.]247[.]168[.]153 (port 8033 observed)**\r\n\r\n **139[.]180[.]184[.]197**\r\n\r\n **66[.]42[.]91[.]32**\r\n\r\n **158[.]247[.]221[.]101**\r\n\r\n **107[.]148[.]27[.]117**\r\n\r\n **139[.]180[.]128[.]142**\r\n\r\n **155[.]138[.]224[.]122**\r\n\r\n **185[.]174[.]136[.]20**\r\n\r\n 139[.]180[.]184[.]197\r\n\r\n 66[.]42[.]91[.]32\r\n\r\n 158[.]247[.]221[.]101\r\n\r\n 107[.]148[.]27[.]117\r\n\r\n 139[.]180[.]128[.]142\r\n\r\n 155[.]138[.]224[.]122\r\n\r\n 185[.]174[.]136[.]20\r\n\r\n 45[.]86[.]229[.]220 \r\n \r\n\r\n 45[.]86[.]231[.]71\r\n\r\n 139[.]99[.]35[.]116\r\n\r\n 139[.]99[.]37[.]119\r\n\r\n 194[.]62[.]42[.]105\r\n\r\n 45[.]86[.]231[[.]71\r\n\r\n 45[.]86[.]229[[.]220\r\n\r\n 185[.]250[.]149[[.]32\r\n\r\n 137[.]175[.]30[.]138\r\n\r\n 146[.]70[.]157[[.]133\r\n\r\n **Older Actor IPs**\r\n\r\n 156[.]251[.]162[.]76\r\n\r\n 156[.]251[.]163[.122\r\n\r\n 156[.]251[.]163[.]19\r\n\r\n 156[.]251[.]162[.111\r\n\r\n \r\n\r\n ### File Path Samples\r\n\r\n ***Files from /var/w***\r\n\r\n Hashes of post-exploitation implants\u2014MD5\r\n\r\n \r\n\r\n **f68c3f72270800ea675889e82bb02fb8**\r\n\r\n e3f640d8785c0c864739529889b1863a\r\n\r\n 08cbaafb176ce6118f7e4e0b2d2d77cf\r\n\r\n bdc2d2f5d5246f8956711bcce9f456b6\r\n\r\n 4548fa6625cb154ab320833186117393\r\n\r\n e5d989b651b3eb351e10e408d5a062b3\r\n\r\n 3191cb2e06e9a30792309813793f78b6\r\n\r\n 12e28c14bb7f7b9513a02e5857592ad7\r\n\r\n ae0839351721db5a9c269fd75dcb57ce\r\n\r\n 856341349dd954d82b112ba9165c4563\r\n\r\n \r\n\r\n Windows sample found on VT with significant code similarity to the samples found on FortiGates\r\n\r\n 54bbea35b095ddfe9740df97b693627b\r\n\r\n \r\n\r\n ### JA3 Fingerprint\r\n\r\n The JA3 for the malware SSL/TLS client connection appears to be **unique to the malware** and can be used to detect an attack.\r\n\r\n bf2b95ac267823f6588b2436bc537b26.\r\n\r\n \r\n\r\n ## Summary of Our Knowledge About the Actor\r\n\r\n The complexity of the exploit suggests an advanced actor:\r\n\r\n \r\n * The exploit requires a deep understanding of FortiOS and the underlying hardware.\r\n * The use of custom implants shows that the actor has advanced capabilities, including reverse-engineering various parts of FortiOS.\r\n * The actor is highly targeted, with some hints of preferred governmental or government-related targets.\r\n * The discovered Windows sample attributed to the attacker displayed artifacts of having been compiled on a machine in the UTC+8 timezone, which includes Australia, China, Russia, Singapore, and other Eastern Asian countries.\r\n * The self-signed certificates created by the attackers were all created between 3 and 8 AM UTC. However, it is difficult to draw any conclusions from this given hackers do not nessesarily operate during office hours and will often operate during victim office hours to help obfuscate their activity with general network traffic.\r\n \r\n ## Conclusion\r\n\r\n Fortinet will continue to track this threat actor activity. To mitigate this issue, we recommend that all customers immediately take the actions recommended in the Critical Advisory, FG-IR-22-398. Additional guidance has been provided here for how to search for the IoCs. Should you identify that your system is showing indicators of compromise, please reach out to Fortinet for support.\r\n\r\n Fortinet will continue to monitor this incident and will update this blog with information as it is found.\r\n\r\n ## Fortinet Protection\r\n\r\n The Fortinet Antivirus engine detects all binaries discussed in this blog using the following AV signatures:\r\n\r\n Elf/BakSo.SX!tr\r\n\r\n The WebFiltering client blocks all network-based URIs.\r\n\r\n A Fortinet Outbreak Alert Package has been created for FortiAnalyzer to detect and report on all traffic to or from IPs within the IoC range specified and will be included in Outbreak Alert Package DB 1.00083. \r\n\r\n https://www.fortiguard.com/updates/outbreak-detection-service?version=1.00083\r\n\r\n Details on how to search for these IoCs can be found in the following Fortinet Community Tech Tip:\r\n\r\n https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-Using-FortiAnalyzer-to-detect-the-FortiOS-heap/ta-p/242672\r\n\r\n Fortinet has released an IPS signature to proactively protect our customers from the exploit CVE-2022-42475 and the C&C channel respectively. \r\n \r\n\r\n FortiOS.SSL-VPN.Heap.Buffer.Overflow\r\n\r\n Bakso.Linux.Backdoor\r\n\r\n Tags: PSIRT, fortios, ssl vpn \r\n\r\n ### Related Posts\r\n\r\n PSIRT Blogs \r\n\r\n ##### Update Regarding CVE-2018-13379\r\n\r\n PSIRT Blogs \r\n\r\n ##### APT 29 Targeting SSL VPN Flaws\r\n\r\n PSIRT Blogs \r\n\r\n ##### FortiOS and SSL Vulnerabilities\r\n\r\n data-sly-test=\"true - got replaced with false to disable the discussion event \r\n * \r\n * \r\n * \r\n * \r\n * \r\n *",
|
|
"object_refs": [
|
|
"report--042a4478-fe19-4ed0-a309-b96da3542a95"
|
|
]
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--fd965220-4aaf-4289-8861-4d5219aafb48",
|
|
"created": "2023-01-13T08:58:03.000Z",
|
|
"modified": "2023-01-13T08:58:03.000Z",
|
|
"relationship_type": "related-to",
|
|
"source_ref": "vulnerability--0dc13dec-e5ab-4c09-8811-41e9a45dbb9e",
|
|
"target_ref": "vulnerability--48f4d58c-85aa-4048-ac46-852d2ce4a23f"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--53e9aa7d-8dc4-4037-8062-218db650f713",
|
|
"created": "2023-01-13T08:58:03.000Z",
|
|
"modified": "2023-01-13T08:58:03.000Z",
|
|
"relationship_type": "weakened-by",
|
|
"source_ref": "vulnerability--0dc13dec-e5ab-4c09-8811-41e9a45dbb9e",
|
|
"target_ref": "x-misp-object--d7cc6b5e-f357-4962-8c46-d19ceb040746"
|
|
},
|
|
{
|
|
"type": "marking-definition",
|
|
"spec_version": "2.1",
|
|
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
|
|
"created": "2017-01-20T00:00:00.000Z",
|
|
"definition_type": "tlp",
|
|
"name": "TLP:WHITE",
|
|
"definition": {
|
|
"tlp": "white"
|
|
}
|
|
}
|
|
]
|
|
} |