{ "type": "bundle", "spec_version": "2.1", "id": "bundle--dd339ce8-1213-4dc9-94f5-9ad4f07aaad4", "created": "2021-09-03T15:25:42.381Z", "modified": "2021-09-03T15:25:42.381Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "objects": [ { "type": "malware", "spec_version": "2.1", "id": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f", "created": "2021-09-03T15:25:42.329Z", "modified": "2021-09-03T15:25:42.329Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "name": "SpecCom", "description": "SpecCom is a malicious 32-bit Windows executable. Command and control (C2) is over HTTP with tasking within HTML comment tags. Tasking is Base64-encoded with multiple layers of XOR obfuscation. Capability includes uploading of data and execution of Windows commands.", "malware_types": [ "backdoor" ], "is_family": false, "capabilities": [ "communicates-with-c2", "controls-local-machine" ], "architecture_execution_envs": [ "x86" ], "implementation_languages": [ "c" ], "x_operating_systems": [ "windows" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--9af552ff-bfb4-4e88-920d-3a13e6ad8f37", "created": "2021-09-03T15:25:42.329Z", "modified": "2021-09-03T15:25:42.329Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "name": "Command and Scripting Interpreter: Windows Command Shell as used by SpecCom", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "execution" } ], "description": "SpecCom tasking allows the execution of Windows command-prompt commands." }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--220e6b3e-1673-46a9-9122-08b4e837b600", "created": "2021-09-03T15:25:42.329Z", "modified": "2021-09-03T15:25:42.329Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "attack-pattern--9af552ff-bfb4-4e88-920d-3a13e6ad8f37", "target_ref": "attack-pattern--d1fcf083-a721-4223-aedf-bf8960798d62" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--74c6a48d-9a2d-4cb0-a7b0-0c1a3629be74", "created": "2021-09-03T15:25:42.329Z", "modified": "2021-09-03T15:25:42.329Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "uses", "source_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f", "target_ref": "attack-pattern--9af552ff-bfb4-4e88-920d-3a13e6ad8f37" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ee15b4f4-5ff9-4634-ba04-9b4246dc54f9", "created": "2021-09-03T15:25:42.329Z", "modified": "2021-09-03T15:25:42.329Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "name": "Obfuscated Files or Information as used by SpecCom", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "defense-evasion" } ], "description": "SpecCom configuration strings are obfuscated using a custom XOR algorithm." }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08f95731-31cc-444c-91a4-55628e79921b", "created": "2021-09-03T15:25:42.329Z", "modified": "2021-09-03T15:25:42.329Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "attack-pattern--ee15b4f4-5ff9-4634-ba04-9b4246dc54f9", "target_ref": "attack-pattern--b3d682b6-98f2-4fb0-aa3b-b4df007ca70a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0cc2a3b9-9af5-4d7c-8156-bbccebd4226c", "created": "2021-09-03T15:25:42.329Z", "modified": "2021-09-03T15:25:42.329Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "uses", "source_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f", "target_ref": "attack-pattern--ee15b4f4-5ff9-4634-ba04-9b4246dc54f9" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3", "created": "2021-09-03T15:25:42.330Z", "modified": "2021-09-03T15:25:42.330Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "name": "Application Layer Protocol: Web Protocols as used by SpecCom", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "command-and-control" } ], "description": "SpecCom command and control is over HTTP." }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4d40f3ae-8031-4a69-9680-80dcac78d842", "created": "2021-09-03T15:25:42.330Z", "modified": "2021-09-03T15:25:42.330Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3", "target_ref": "attack-pattern--df8b2a25-8bdf-4856-953c-a04372b1c161" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b1c528de-d764-4f19-aaaa-512ae2610035", "created": "2021-09-03T15:25:42.330Z", "modified": "2021-09-03T15:25:42.330Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "uses", "source_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e5c90ca1-a6a8-4bad-a1d7-d44ada742bd0", "created": "2021-09-03T15:25:42.330Z", "modified": "2021-09-03T15:25:42.330Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "name": "Data Encoding: Standard Encoding as used by SpecCom", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "command-and-control" } ], "description": "SpecCom tasking is encoded using Base64." }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f7419b25-8d97-4769-a51b-6f99b78202ec", "created": "2021-09-03T15:25:42.330Z", "modified": "2021-09-03T15:25:42.330Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "attack-pattern--e5c90ca1-a6a8-4bad-a1d7-d44ada742bd0", "target_ref": "attack-pattern--04fd5427-79c7-44ea-ae13-11b24778ff1c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9a983aec-33b5-416f-8a3f-a54bd922eec2", "created": "2021-09-03T15:25:42.330Z", "modified": "2021-09-03T15:25:42.330Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "uses", "source_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f", "target_ref": "attack-pattern--e5c90ca1-a6a8-4bad-a1d7-d44ada742bd0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ff24ed18-7b12-46c1-abfc-95ebfe18a5bb", "created": "2021-09-03T15:25:42.330Z", "modified": "2021-09-03T15:25:42.330Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "name": "Data Obfuscation as used by SpecCom", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "command-and-control" } ], "description": "SpecCom tasking is obfuscated using a custom XOR algorithm." }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f81b75d1-3a00-4e18-a831-843797bfc69a", "created": "2021-09-03T15:25:42.330Z", "modified": "2021-09-03T15:25:42.330Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "attack-pattern--ff24ed18-7b12-46c1-abfc-95ebfe18a5bb", "target_ref": "attack-pattern--ad255bfe-a9e6-4b52-a258-8d3462abe842" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c25be610-ea3b-4e93-b0cf-ab2c9fed34fe", "created": "2021-09-03T15:25:42.330Z", "modified": "2021-09-03T15:25:42.330Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "uses", "source_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f", "target_ref": "attack-pattern--ff24ed18-7b12-46c1-abfc-95ebfe18a5bb" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--954eec45-044c-4a62-984e-2eb1c75e8c59", "created": "2021-09-03T15:25:42.331Z", "modified": "2021-09-03T15:25:42.331Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_help_support_window_name_stack_string {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom window name built on the stack\"\r\n strings:\r\n $ = {6A 48 58 6A 65 66 89 45 D8 58 6A 6C 66 89 45 DA 58 6A 70 66 89 45 DC 58 6A 20 66 89 45 DE 58 6A 61 66 89 45 E0 58 6A 6E 66 89 45 E2 58 6A 64 66 89 45 E4 58 6A 20 66 89 45 E6 58 6A 53 66 89 45 E8 58 6A 75 66 89 45 EA 58 6A 70 8B 5D 08 66 89 45 EC 58 6A 6F 66 89 45 EE 66 89 45 F0 58 6A 72 66 89 45 F2 58 66 89 45 F4 6A 74 58 66 89 45 F6 33 C0 66 89 45 F8 8D 45 D8 50 68 E0 29 41 00}\r\n $ = {C7 45 D8 48 00 65 00 C7 45 DC 6C 00 70 00 C7 45 E0 20 00 61 00 C7 45 E4 6E 00 64 00 C7 45 E8 20 00 53 00 C7 45 EC 75 00 70 00 C7 45 F0 70 00 6F 00 C7 45 F4 72 00 74 00}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom window name built on the stack", "valid_from": "2021-09-03T15:25:42.331Z", "name": "YARA: SpecCom_help_support_window_name_stack_string", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fdea36fc-ab33-4276-b1dc-f273dc2a9e79", "created": "2021-09-03T15:25:42.331Z", "modified": "2021-09-03T15:25:42.331Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--954eec45-044c-4a62-984e-2eb1c75e8c59", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b295e3ab-5b3b-46d6-96db-987abbabbacb", "created": "2021-09-03T15:25:42.331Z", "modified": "2021-09-03T15:25:42.331Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_content_type_stack_string {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom content type string built on the stack\"\r\n strings:\r\n $ = {6A 43 89 45 FC 89 85 34 FD FF FF 58 6A 6F 5E 6A 6E 5A 6A 74 66 89 45 8C 8B C6 66 89 45 8E 8B C2 66 89 45 90 58 6A 65 59 6A 74 66 89 45 92 8B C1 66 89 45 94 8B C2 66 89 45 96 58 6A 2D 66 89 45 98 58 6A 54 8B F8 66 89 7D 9A 5F 6A 79 66 89 7D 9C 5F 6A 70 66 89 7D 9E 5F 6A 3A 66 89 7D A0 8B F9 66 89 7D A2 5F 6A 20 66 89 7D A4 5F 6A 61 66 89 7D A6 5F 6A 70 66 89 7D A8 5F 6A 6C 66 89 7D AA 66 89 7D AC 5F 6A 69 66 89 7D AE 5F 6A 63 66 89 7D B0 5F 6A 61 66 89 7D B2 5F 66 89 7D B4 6A 74 5F 66 89 7D B6 6A 69 5F 66 89 7D B8 8B FE 66 89 7D BA 8B FA 6A 2F 66 89 7D BC 5F 6A 78 66 89 7D BE 5F 6A 77 66 89 7D C0 8B F8 66 89 7D C2 5F 6A 66 66 89 7D C4 66 89 7D C6 66 89 7D C8 8B F8 66 89 7D CA 5F 6A 72 66 89 7D CC 8B FE 66 89 45 D4 66 89 7D CE 5F 6A 6D 66 89 7D D0 5F 6A 75 58 6A 72 66 89 45 D6 58 6A 6C 66 89 45 D8 58 66 89 45 DA 6A 63 8B C1 66 89 45 DC 58 6A 64 66 89 45 E0 58 66 89 45 E4 66 89 45 E8 6A 0D 58 66 89 45 EA 6A 0A 58 66 89 45 EC}\r\n $ = {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}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom content type string built on the stack", "valid_from": "2021-09-03T15:25:42.331Z", "name": "YARA: SpecCom_content_type_stack_string", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cdb19981-4f34-4e07-a727-678a36dce330", "created": "2021-09-03T15:25:42.331Z", "modified": "2021-09-03T15:25:42.331Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--b295e3ab-5b3b-46d6-96db-987abbabbacb", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--168c49bf-2700-458f-8bbe-59560957715f", "created": "2021-09-03T15:25:42.331Z", "modified": "2021-09-03T15:25:42.331Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_get_mac_address {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom obtaining MAC address\"\r\n strings:\r\n $ = {8D 8D F0 80 FF FF 51 8D 8D FC 80 FF FF 51 C7 85 F0 80 FF FF 90 7E 00 00 FF D0 8B C8 33 C0 C6 45 F4 00 8D 7D F5 AB 66 AB AA 85 C9 0F 85 1D 01 00 00 53 6A 25 5E 6A 30 5A 6A 32 59 8B C6 66 89 45 8C 8B C2 66 89 45 8E 6A 58 8B C1 66 89 45 90}\r\n $ = {8D 8D 00 81 FF FF 51 8D 95 04 81 FF FF 52 C7 85 00 81 FF FF 90 7E 00 00 FF D0 85 C0 0F 85 C7 00 00 00 8B 85 9C 82 FF FF 8B C8 C1 E9 08 0F B6 D1 52 0F B6 C0 50 8B 85 98 82 FF FF 8B C8 C1 E9 18 51 8B D0 C1 EA 10 0F B6 CA 51 8B D0 C1 EA 08 0F B6 CA 0F B6 D0 51 52 8D 45 94}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom obtaining MAC address", "valid_from": "2021-09-03T15:25:42.331Z", "name": "YARA: SpecCom_get_mac_address", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3053bcec-8ef5-44ac-828c-beb26aee27eb", "created": "2021-09-03T15:25:42.331Z", "modified": "2021-09-03T15:25:42.331Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--168c49bf-2700-458f-8bbe-59560957715f", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--81053428-6b53-4ed7-b214-4ee3a7348913", "created": "2021-09-03T15:25:42.331Z", "modified": "2021-09-03T15:25:42.331Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_stack_string_d_54321_k {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom tasking request URL path built on the stack\"\r\n strings:\r\n $ = {6A 64 59 6A 3D 66 89 4D C8 59 6A 35 8B D1 66 89 55 CA 5A 6A 34 66 89 55 CC 5A 6A 33 66 89 55 CE 5A 6A 32 66 89 55 D0 5A 6A 31 66 89 55 D2 5A 6A 26 66 89 55 D4 5A 6A 6B 66 89 55 D6 5A 66 89 55 D8 8B D1 66 89 55 DA 6A 26 33 D2 66 89 55 DC}\r\n $ = {C7 45 C8 64 00 3D 00 C7 45 CC 35 00 34 00 C7 45 D0 33 00 32 00 C7 45 D4 31 00 26 00 C7 45 D8 6B 00 3D 00 C7 45 E8 26 00 77 00}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom tasking request URL path built on the stack", "valid_from": "2021-09-03T15:25:42.331Z", "name": "YARA: SpecCom_stack_string_d_54321_k", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a73ffd9-67cd-485c-af3e-0aa554f46fcc", "created": "2021-09-03T15:25:42.331Z", "modified": "2021-09-03T15:25:42.331Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--81053428-6b53-4ed7-b214-4ee3a7348913", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f888f829-82ea-4b93-8032-f7338f70f9ba", "created": "2021-09-03T15:25:42.331Z", "modified": "2021-09-03T15:25:42.331Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_stack_string_h_95425_u {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom tasking response URL path built on the stack\"\r\n strings:\r\n $ = {6A 68 59 6A 3D 66 89 4D C8 59 6A 39 8B D1 66 89 55 CA 5A 6A 35 66 89 55 CC 5A 6A 34 66 89 55 CE 5A 6A 32 66 89 55 D0 5A 6A 35 66 89 55 D2 5A 6A 26 66 89 55 D4 5A 6A 75 66 89 55 D6 5A 66 89 55 D8 6A 26}\r\n $ = {C7 45 C8 68 00 3D 00 C7 45 CC 39 00 35 00 C7 45 D0 34 00 32 00 C7 45 D4 35 00 26 00 C7 45 D8 75 00 3D 00 66 89 55 DC C7 45 E8 26 00 72 00 C7 45 E0 26 00 62 00 C7 45 E4 3D 00 00 00}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom tasking response URL path built on the stack", "valid_from": "2021-09-03T15:25:42.331Z", "name": "YARA: SpecCom_stack_string_h_95425_u", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--015f0a4a-bd38-47cd-b5cb-45691406fd25", "created": "2021-09-03T15:25:42.331Z", "modified": "2021-09-03T15:25:42.331Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--f888f829-82ea-4b93-8032-f7338f70f9ba", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6a4234ad-d4b2-48eb-89de-d2619dedf52d", "created": "2021-09-03T15:25:42.331Z", "modified": "2021-09-03T15:25:42.331Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_sleep_calculation {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom sleep duration calculation code\"\r\n strings:\r\n $ = {FF D? 2B 05 ?? ?? ?? ?? 3D 60 EA 00 00 73 07 B8 ?? ?? ?? ?? EB 28 FF D? 2B 05 ?? ?? ?? ?? 3D 60 EA 00 00 72 14 FF D? 2B 05 ?? ?? ?? ?? 3D 80 EE 36 00 B8 ?? ?? ?? ?? 72 05 B8 ?? ?? ?? ?? 50}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom sleep duration calculation code", "valid_from": "2021-09-03T15:25:42.331Z", "name": "YARA: SpecCom_sleep_calculation", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5c2586f-c399-41bc-9013-89272c4816e5", "created": "2021-09-03T15:25:42.331Z", "modified": "2021-09-03T15:25:42.331Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6a4234ad-d4b2-48eb-89de-d2619dedf52d", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5d5cfdb3-f463-439b-bb73-467aae7e9ceb", "created": "2021-09-03T15:25:42.331Z", "modified": "2021-09-03T15:25:42.331Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_stack_string_html_comment {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom HTML comment tasking format built on the stack\"\r\n strings:\r\n $ = {6A 3C 58 C6 45 FC 01 6A 21 66 89 45 D4 58 6A 2D 66 89 45 D6 58 6A 7C 8B C8 66 89 4D D8 66 89 4D DA 59 6A 23 66 89 4D DC 59 66 89 4D DE 33 C9 6A 23 66 89 4D E0 59 6A 7C 66 89 4D E4 59 66 89 45 EA 66 89 4D E6 8B C8 6A 3E 58 66 89 45 EC}\r\n $ = {C7 45 B8 3C 00 21 00 C7 45 BC 2D 00 2D 00 C7 45 C0 7C 00 23 00 C7 45 E4 23 00 7C 00 C7 45 E8 2D 00 2D 00 C7 45 EC 3E 00 00 00}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom HTML comment tasking format built on the stack", "valid_from": "2021-09-03T15:25:42.331Z", "name": "YARA: SpecCom_stack_string_html_comment", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ddbfd56a-b6de-4675-b1ee-a249cbeb5702", "created": "2021-09-03T15:25:42.332Z", "modified": "2021-09-03T15:25:42.332Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--5d5cfdb3-f463-439b-bb73-467aae7e9ceb", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--efeb821d-f87c-4d52-a5b7-223c12c19297", "created": "2021-09-03T15:25:42.332Z", "modified": "2021-09-03T15:25:42.332Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_stack_string_success {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom success message built on the stack\"\r\n strings:\r\n $ = {6A 5B 59 6A 53 66 89 4D 94 59 6A 75 66 89 4D 96 59 6A 63 66 89 4D 98 59 6A 65 66 89 4D 9A 66 89 4D 9C 59 6A 73 5E 6A 5D 66 89 4D 9E}\r\n $ = {C7 45 94 5B 00 53 00 C7 45 98 75 00 63 00 C7 45 9C 63 00 65 00 C7 45 A0 73 00 73 00 C7 45 A4 5D 00 0D 00 C7 45 A8 0A 00 00 00}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom success message built on the stack", "valid_from": "2021-09-03T15:25:42.332Z", "name": "YARA: SpecCom_stack_string_success", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--11e3e1f9-44ef-4e3b-8217-09b1a20692eb", "created": "2021-09-03T15:25:42.332Z", "modified": "2021-09-03T15:25:42.332Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--efeb821d-f87c-4d52-a5b7-223c12c19297", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--55057064-6e5a-4803-a3f9-d0bb5039be62", "created": "2021-09-03T15:25:42.332Z", "modified": "2021-09-03T15:25:42.332Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_stack_string_failed {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom failed message built on the stack\"\r\n strings:\r\n $ = {33 C9 66 89 4D AA 59 6A 46 66 89 8D 7C FF FF FF 59 6A 61 66 89 8D 7E FF FF FF 59 6A 69 66 89 4D 80 59 6A 6C 66 89 4D 82 59 6A 65 66 89 4D 84 59 6A 64 66 89 4D 86 59 6A 21 66 89 4D 88 59 6A 5D 66 89 4D 8A}\r\n $ = {C7 85 7C FF FF FF 5B 00 46 00 C7 45 80 61 00 69 00 C7 45 84 6C 00 65 00 C7 45 88 64 00 21 00 C7 45 8C 5D 00 0D 00 C7 45 90 0A 00 00 00}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom failed message built on the stack", "valid_from": "2021-09-03T15:25:42.332Z", "name": "YARA: SpecCom_stack_string_failed", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9c70301d-c89b-4535-82a2-2b904dded70b", "created": "2021-09-03T15:25:42.332Z", "modified": "2021-09-03T15:25:42.332Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--55057064-6e5a-4803-a3f9-d0bb5039be62", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--533b0cb7-2de4-4dc5-9599-78314e9719a9", "created": "2021-09-03T15:25:42.332Z", "modified": "2021-09-03T15:25:42.332Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_stack_string_cmd_U_E {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom upload command tag and end marker built on stack\"\r\n strings:\r\n $ = {6A 78 66 89 4D 92 59 66 89 4D E0 6A 2D 59 6A 3C 66 89 4D E2 59 6A 23 66 89 4D E4 59 6A 55 8B D1 66 89 55 E6 5A 66 89 55 E8 6A 3E 8B D1 66 89 55 EA 5A 66 89 55 EC 33 D2 6A 3C 66 89 55 EE 5A 66 89 55 CC 8B D1 6A 45 66 89 55 CE 5A 66 89 4D D2 6A 3E 59 66 89 4D D4}\r\n $ = {C7 45 E0 78 00 2D 00 C7 45 E4 3C 00 23 00 C7 45 E8 55 00 23 00 C7 45 EC 3E 00 00 00 C7 45 CC 3C 00 23 00 C7 45 D0 45 00 23 00 C7 45 D4 3E 00 00 00}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom upload command tag and end marker built on stack", "valid_from": "2021-09-03T15:25:42.332Z", "name": "YARA: SpecCom_stack_string_cmd_U_E", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3a2d75e1-f78b-49eb-87bb-89e66169998b", "created": "2021-09-03T15:25:42.332Z", "modified": "2021-09-03T15:25:42.332Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--533b0cb7-2de4-4dc5-9599-78314e9719a9", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0cdb0465-9978-40b6-b764-1bb15882aacd", "created": "2021-09-03T15:25:42.332Z", "modified": "2021-09-03T15:25:42.332Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_stack_string_hardcoded_xor_key_32E25C48 {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom hard-coded key used in word-length XOR algorithm\"\r\n strings:\r\n $ = {C7 45 B4 32 E2 5C 48 C7 45 B8 EC 0E C3 7F C7 45 BC 5F 7A ED 11 C7 45 C0 CB E5 0A 87 C7 45 C4 0F FA 7D FC C7 45 C8 F9 A7 39 38 C7 45 CC 3D E3 6B 6F C7 45 D0 BF 9B 84 1F C7 45 D4 E7 BC D1 0E C7 45 D8 0A 62 79 7E C7 45 DC CE 6F 7F E6 C7 45 E0 B7 F9 9D D9 C7 45 E4 8C 67 9F 7A C7 45 E8 86 EB 7B D7 C7 45 EC 31 66 00 00}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom hard-coded key used in word-length XOR algorithm", "valid_from": "2021-09-03T15:25:42.332Z", "name": "YARA: SpecCom_stack_string_hardcoded_xor_key_32E25C48", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--10eafd6f-452e-469f-8e60-64bb385e0ec1", "created": "2021-09-03T15:25:42.332Z", "modified": "2021-09-03T15:25:42.332Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--0cdb0465-9978-40b6-b764-1bb15882aacd", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3cc54016-82f5-4e6d-bf45-8c466c65991f", "created": "2021-09-03T15:25:42.332Z", "modified": "2021-09-03T15:25:42.332Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--0cdb0465-9978-40b6-b764-1bb15882aacd", "target_ref": "attack-pattern--ff24ed18-7b12-46c1-abfc-95ebfe18a5bb" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e5108e39-141f-49a7-b4fe-fee385e92318", "created": "2021-09-03T15:25:42.333Z", "modified": "2021-09-03T15:25:42.333Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_stack_string_upload_tmp_logFile {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom upload temporary file format built on stack\"\r\n strings:\r\n $ = {6A 5B 58 6A 55 66 89 45 ?? 58 6A 70 66 89 45 ?? 58 6A 6C 66 89 45 ?? 58 6A 6F 66 89 45 ?? 58 6A 61 66 89 45 ?? 58 6A 64 66 89 45 ?? 58 6A 5D 66 89 45 ?? 58 6A 0D 66 89 45 ?? 58 6A 0A 66 89 45 ?? 58 6A 25 66 89 45 }\r\n $ = {6A 25 66 89 45 D6 33 C0 66 89 45 D8 58 6A 74 66 89 45 AC 8B C6 66 89 45 AE 58 6A 6D 66 89 45 B0 58 6A 70 66 89 45 B2 58 6A 25 66 89 45 B4 58 6A 64 66 89 45 B6 58 6A 2E 66 89 45 B8 58 6A 6C 66 89 45 BA 58 6A 6F 66 89 45 BC 58 6A 67 66 89 45 BE 58 6A 46 66 89 45 C0 33 C0 66 89 45 C2 58 6A 69 66 89 45 DC 58 6A 6C 66 89 45 DE 58 6A 65 66 89 45 E0 58 6A 3A 66 89 45 E2 58 66 89 45 E4 6A 25 58 66 89 45 E6 6A 0D 58 66 89 45 EA 6A 0A 58 66 89 45 EC 33 C0 66 89 45 EE}\r\n $ = {C7 45 C4 5B 00 55 00 C7 45 C8 70 00 6C 00 C7 45 CC 6F 00 61 00 C7 45 D0 64 00 5D 00 C7 45 D4 0D 00 0A 00 C7 45 AC 25 00 73 00 C7 45 B0 74 00 6D 00 C7 45 B4 70 00 25 00 C7 45 B8 64 00 2E 00 C7 45 BC 6C 00 6F 00 C7 45 C0 67 00 00 00 C7 45 DC 46 00 69 00 C7 45 E0 6C 00 65 00 C7 45 E4 3A 00 25 00 C7 45 E8 73 00 0D 00 C7 45 EC 0A 00 00 00}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom upload temporary file format built on stack", "valid_from": "2021-09-03T15:25:42.333Z", "name": "YARA: SpecCom_stack_string_upload_tmp_logFile", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68bf2ffd-05bf-4047-b237-b501e3a2440b", "created": "2021-09-03T15:25:42.333Z", "modified": "2021-09-03T15:25:42.333Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--e5108e39-141f-49a7-b4fe-fee385e92318", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--99448f65-d6a3-4b88-96dd-1dbac22215e4", "created": "2021-09-03T15:25:42.333Z", "modified": "2021-09-03T15:25:42.333Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_deobfuscation_function_word_xor {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom word-length XOR algorithm\"\r\n strings:\r\n $ = {8D 04 70 83 F9 08 72 04 8B 0F EB 02 8B CF 66 8B 00 66 33 02 46 66 89 04 59 3B 75 18 72 02 33 F6 8B 47 10 43}\r\n $ = {66 8B 34 46 66 33 34 3B 40 66 89 34 0B 3B 45 18 72 02 33 C0 8B 75 F0 8B 4A 10 46 89 75 F0 3B CE 77 B1}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom word-length XOR algorithm", "valid_from": "2021-09-03T15:25:42.333Z", "name": "YARA: SpecCom_deobfuscation_function_word_xor", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f484d68-cc81-4d72-b1ac-d2e440f4c59f", "created": "2021-09-03T15:25:42.334Z", "modified": "2021-09-03T15:25:42.334Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--99448f65-d6a3-4b88-96dd-1dbac22215e4", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--58c15235-298e-48cd-aacb-3526f486ba82", "created": "2021-09-03T15:25:42.334Z", "modified": "2021-09-03T15:25:42.334Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--99448f65-d6a3-4b88-96dd-1dbac22215e4", "target_ref": "attack-pattern--ff24ed18-7b12-46c1-abfc-95ebfe18a5bb" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--225df225-a51d-4733-8f34-da317785dd6e", "created": "2021-09-03T15:25:42.334Z", "modified": "2021-09-03T15:25:42.334Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "rule SpecCom_stack_string_hardcoded_xor_key_api_names {\r\n meta:\r\n author = \"NCSC\"\r\n description = \"Detects SpecCom hard-coded key, based off API names, used in word-length XOR algorithm\"\r\n strings:\r\n $ = {6A 47 58 6A 65 66 89 85 EC FE FF FF 58 6A 74 5E 6A 4D 8B C8 66 89 8D EE FE FF FF 8B CE 66 89 8D F0 FE FF FF 59 6A 73 66 89 8D F2 FE FF FF 8B C8 66 89 8D F4 FE FF FF 59 6A 61 8B D1 66 89 95 F6 FE FF FF 66 89 95 F8 FE FF FF 5A 6A 67 66 89 95 FA FE FF FF 5A 6A 50 66 89 95 FC FE FF FF 8B D0 66 89 95 FE FE FF FF 5A 6A 6F 5F 6A 20 66 89 95 00 FF FF FF 8B D7 66 89 95 02 FF FF FF 8B D1 66 89 95 04 FF FF FF 5A 6A 53 8B DA 66 89 9D 06 FF FF FF 5B 66 89 9D 08 FF FF FF 6A 6E 8B D8 66 89 9D 0A FF FF FF 5B 66 89 9D 0C FF FF FF 6A 64 5B 66 89 9D 0E FF FF FF 6A 4D 5B 66 89 9D 10 FF FF FF 6A 61 8B D8 66 89 9D 12 FF FF FF 8B D9 66 89 9D 14 FF FF FF 66 89 9D 16 FF FF FF 5B 66 89 9D 18 FF FF FF 6A 67 5B 66 89 9D 1A FF FF FF 8B D8 66 89 9D 1C FF FF FF 8B DA 66 89 9D 1E FF FF FF 6A 47 5B 66 89 9D 20 FF FF FF 8B D8 66 89 9D 22 FF FF FF 8B DE 6A 45 66 89 9D 24 FF FF FF 5B 66 89 9D 26 FF FF FF 6A 78 5B 66 89 9D 28 FF FF FF 6A 69 5B 66 89 9D 2A FF FF FF 6A 43 8B DE 66 89 9D 2C FF FF FF 5B 66 89 9D 2E FF FF FF 6A 64 8B DF 66 89 9D 30 FF FF FF 5B 66 89 9D 32 FF FF FF 6A 50 8B D8 66 89 9D 34 FF FF FF 5B 66 89 9D 36 FF FF FF 6A 72 5B 66 89 9D 38 FF FF FF 6A 63 8B DF 66 89 9D 3A FF FF FF 5B 66 89 9D 3C FF FF FF 6A 43 8B D8 66 89 9D 3E FF FF FF 8B D9 66 89 9D 40 FF FF FF 8B DA 66 89 9D 42 FF FF FF 5B 66 89 9D 44 FF FF FF 6A 72 5B 66 89 9D 46 FF FF FF 6A 61 8B D8 66 89 9D 48 FF FF FF 5B 66 89 9D 4A FF FF FF 6A 50 8B DE 66 89 9D 4C FF FF FF 8B D8 66 89 9D 4E FF FF FF 5B 66 89 9D 50 FF FF FF 6A 72 5B 66 89 9D 52 FF FF FF 6A 63 8B DF 66 89 9D 54 FF FF FF 5B 66 89 9D 56 FF FF FF 8B D8 66 89 9D 58 FF FF FF 8B D9 66 89 9D 5A FF FF FF 66 89 9D 5C FF FF FF 6A 47 8B DA 66 89 9D 5E FF FF FF 5B 66 89 9D 60 FF FF FF 8B D8 66 89 9D 62 FF FF FF 8B DE 6A 54 66 89 9D 64 FF FF FF 5B 6A 69 66 89 9D 66 FF FF FF 5B 66 89 9D 68 FF FF FF 6A 63 5B 6A 6B 66 89 9D 6A FF FF FF 5B 6A 43 66 89 9D 6C FF FF FF 5B 6A 75 66 89 9D 6E FF FF FF 8B DF 66 89 9D 70 FF FF FF 5B 6A 6E 66 89 9D 72 FF FF FF 5B 6A 47 66 89 9D 74 FF FF FF 8B DE 66 89 9D 76 FF FF FF 8B DA 66 89 9D 78 FF FF FF 5B 6A 44 66 89 9D 7A FF FF FF 8B D8 66 89 9D 7C FF FF FF 8B DE 66 89 9D 7E FF FF FF 5B 6A 43 66 89 5D 80 5B 6A 45 66 89 5D 82 5B 6A 78 66 89 5D 84 5B 6A 43 66 89 5D 86 8B DA 66 89 5D 88 5B 6A 70 66 89 5D 8A 8B DF 66 89 5D 8C 5B 6A 79 66 89 5D 8E 5B 6A 49 66 89 5D 90 5B 6A 6D 66 89 5D 92 5B 6A 61 66 89 5D 94 5B 6A 67 66 89 5D 96 5B 66 89 5D 98 6A 44 8B D8 66 89 5D 9A 8B DA 66 89 5D 9C 5B 6A 72 66 89 5D 9E 5B 6A 61 66 89 5D A0 5B 6A 77 66 89 5D A2 5B 66 89 5D A4 6A 54 5B 6A 78 66 89 5D A6 8B D8 66 89 5D A8 5B 6A 43 66 89 5D AA 8B DE 66 89 5D AC 8B DA 66 89 5D AE 5B 6A 6C 66 89 5D B0 5B 6A 48 66 89 5D B2 8B DF 66 89 5D B4 8B D9 66 89 5D B6 8B D8 66 89 5D B8 5B 6A 61 66 89 5D BA 5B 6A 6E 66 89 5D BC 5B 6A 64 66 89 5D BE 5B 6A 6C 66 89 55 C6 66 89 5D C0 5B 6A 53 5A 6A 6E 66 89 55 C8 8B D0 66 89 55 CA 5A 6A 64 66 89 55 CC 5A 6A 4D 66 89 55 CE 5A 6A 61 66 89 55 D0 66 89 4D D6 8B D0 66 89 55 D2 8B D1 59 6A 67 66 89 4D D8 59 66 89 4D DA 6A 54 8B C8 66 89 4D DC 59 6A 69 66 89 4D DE 59 6A 6D 66 89 5D C2 66 89 4D E0 59 8B D8 66 89 5D C4 66 89 55 D4 66 89 4D E2 66 89 45 E4 66 89 7D E6 6A 75 58 66 89 45 E8}\r\n condition:\r\n (uint16(0) == 0x5A4D and uint16(uint32(0x3c)) == 0x4550) and any of them\r\n}", "description": "Detects SpecCom hard-coded key, based off of API names, used in word-length XOR algorithm", "valid_from": "2021-09-03T15:25:42.334Z", "name": "YARA: SpecCom_stack_string_hardcoded_xor_key_api_names", "pattern_type": "yara" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3bf46672-56b3-4b40-b424-908994922baa", "created": "2021-09-03T15:25:42.334Z", "modified": "2021-09-03T15:25:42.334Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--225df225-a51d-4733-8f34-da317785dd6e", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f54f691b-247b-4443-9ca6-c90e4c25ee86", "created": "2021-09-03T15:25:42.334Z", "modified": "2021-09-03T15:25:42.334Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--225df225-a51d-4733-8f34-da317785dd6e", "target_ref": "attack-pattern--ff24ed18-7b12-46c1-abfc-95ebfe18a5bb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f7330f5-7c2f-4b0b-b83e-01eda71b336d", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--2c569091-1aad-408c-8200-56db1a4e2473", "target_ref": "indicator--91d85877-8065-4a11-81d5-e4f1bc9db385" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d5e216b-29e4-4e05-a9c7-bec6a8bedac8", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--2c569091-1aad-408c-8200-56db1a4e2473", "target_ref": "indicator--22a405d6-4699-4af8-bcaf-79fcba6bea55" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c055b2d6-e85c-4891-9d96-c28479f8d58e", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--2c569091-1aad-408c-8200-56db1a4e2473", "target_ref": "indicator--81e370e0-c1ca-4c2e-891f-900fe254996d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd479e4e-6bcc-4292-91ad-e61cdbdabdb1", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--91d85877-8065-4a11-81d5-e4f1bc9db385", "target_ref": "indicator--2c569091-1aad-408c-8200-56db1a4e2473" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8d0e2d21-15a1-4e7b-a944-be348a8efd49", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--91d85877-8065-4a11-81d5-e4f1bc9db385", "target_ref": "indicator--22a405d6-4699-4af8-bcaf-79fcba6bea55" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1d76ddc9-2126-4aba-ba93-cfd4c278ad07", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--91d85877-8065-4a11-81d5-e4f1bc9db385", "target_ref": "indicator--81e370e0-c1ca-4c2e-891f-900fe254996d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f02c3e35-1e9d-471c-93fc-da6b1ca3b9a0", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--22a405d6-4699-4af8-bcaf-79fcba6bea55", "target_ref": "indicator--2c569091-1aad-408c-8200-56db1a4e2473" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6825ac9-9a18-4162-8096-3c19e9cd96c0", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--22a405d6-4699-4af8-bcaf-79fcba6bea55", "target_ref": "indicator--91d85877-8065-4a11-81d5-e4f1bc9db385" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ee4a96b-65e4-47cf-b0f6-1c998287717d", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--22a405d6-4699-4af8-bcaf-79fcba6bea55", "target_ref": "indicator--81e370e0-c1ca-4c2e-891f-900fe254996d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe36d613-2b85-47a9-91e0-8d75c383abd5", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--81e370e0-c1ca-4c2e-891f-900fe254996d", "target_ref": "indicator--2c569091-1aad-408c-8200-56db1a4e2473" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1a709c92-e33e-48e9-bc6e-caed1703390b", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--81e370e0-c1ca-4c2e-891f-900fe254996d", "target_ref": "indicator--91d85877-8065-4a11-81d5-e4f1bc9db385" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ccaea0d7-bcc8-40cc-965e-c38b67b4ac63", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--81e370e0-c1ca-4c2e-891f-900fe254996d", "target_ref": "indicator--22a405d6-4699-4af8-bcaf-79fcba6bea55" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--71ca153e-2a9e-45f9-bf84-73be625dec34", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f2d21f4d-1f63-4a9b-a5fb-2bb19bf8d106", "target_ref": "indicator--303468cf-ec83-4297-8934-0f7c1a7cddae" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--35bc4d69-6f44-43a3-ae36-bb244dd148b8", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f2d21f4d-1f63-4a9b-a5fb-2bb19bf8d106", "target_ref": "indicator--daf9dfe5-42e1-455c-9782-b4ae201d064a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96d428be-0eb3-499d-b2f5-cc87b108e4df", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--303468cf-ec83-4297-8934-0f7c1a7cddae", "target_ref": "indicator--f2d21f4d-1f63-4a9b-a5fb-2bb19bf8d106" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--00e99345-c069-4349-b19d-b1e58f67af23", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--303468cf-ec83-4297-8934-0f7c1a7cddae", "target_ref": "indicator--daf9dfe5-42e1-455c-9782-b4ae201d064a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e7bda8bd-de68-4cd6-bee2-358f463c8496", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--daf9dfe5-42e1-455c-9782-b4ae201d064a", "target_ref": "indicator--f2d21f4d-1f63-4a9b-a5fb-2bb19bf8d106" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f1cf7fcf-6297-40b7-95f2-077b97e67718", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--daf9dfe5-42e1-455c-9782-b4ae201d064a", "target_ref": "indicator--303468cf-ec83-4297-8934-0f7c1a7cddae" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1d7eb5eb-042d-43a0-b6ba-855217ce0811", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--54ceb17b-2713-4015-84c1-c5aefb62aa0c", "target_ref": "indicator--f7ca8982-e058-4bdd-abc3-e1ace5944d0e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f022c8c5-1c72-4fa9-b697-e4d4927b0ce0", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--54ceb17b-2713-4015-84c1-c5aefb62aa0c", "target_ref": "indicator--b859d1e3-7e2d-4c54-b8e7-36428190a238" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f4fe118c-a1f2-46e0-b5a8-43d11f188974", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f7ca8982-e058-4bdd-abc3-e1ace5944d0e", "target_ref": "indicator--54ceb17b-2713-4015-84c1-c5aefb62aa0c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e1be09d-e4b9-438a-979f-b40999014184", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f7ca8982-e058-4bdd-abc3-e1ace5944d0e", "target_ref": "indicator--b859d1e3-7e2d-4c54-b8e7-36428190a238" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--75e39a31-245a-4ed0-8b3c-97e8d6ba2506", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--b859d1e3-7e2d-4c54-b8e7-36428190a238", "target_ref": "indicator--54ceb17b-2713-4015-84c1-c5aefb62aa0c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d359d355-3398-4165-a0de-9c8bbdd07fb0", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--b859d1e3-7e2d-4c54-b8e7-36428190a238", "target_ref": "indicator--f7ca8982-e058-4bdd-abc3-e1ace5944d0e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--edfa44b0-1847-4716-8888-d62629089f56", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--7fe31ba6-462c-4e6e-afc6-61aa595d22a5", "target_ref": "indicator--337e2e7c-f259-426e-abe4-3ec2960385dd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f33b9a40-dba4-4543-9b6f-7ee3fbe21efb", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--7fe31ba6-462c-4e6e-afc6-61aa595d22a5", "target_ref": "indicator--3bdc2323-dc7e-472e-864a-730d97035264" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4521b437-6ad3-41c9-8efd-b8a9e5571b26", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--337e2e7c-f259-426e-abe4-3ec2960385dd", "target_ref": "indicator--7fe31ba6-462c-4e6e-afc6-61aa595d22a5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a761d12e-0f2d-44c4-8226-0aaa5ef736db", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--337e2e7c-f259-426e-abe4-3ec2960385dd", "target_ref": "indicator--3bdc2323-dc7e-472e-864a-730d97035264" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--13af6c06-9296-4689-9e6b-edc089f2ecf0", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--3bdc2323-dc7e-472e-864a-730d97035264", "target_ref": "indicator--7fe31ba6-462c-4e6e-afc6-61aa595d22a5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--42f04dbf-01e1-43db-8f4a-e676a1258363", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--3bdc2323-dc7e-472e-864a-730d97035264", "target_ref": "indicator--337e2e7c-f259-426e-abe4-3ec2960385dd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0d5baf83-52b0-4aab-ad16-da830eb83083", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--9d69c06a-0d35-4dd5-9d91-5ffe2d1bae65", "target_ref": "indicator--5bb109f9-1208-420b-b23f-988b3d8e7d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3ca02e50-57fa-4d6f-a6ac-2114644847c5", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--9d69c06a-0d35-4dd5-9d91-5ffe2d1bae65", "target_ref": "indicator--7c6c82b8-d50e-4275-8d40-7231e7388385" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d213f5ad-4753-48e0-8879-347679849ef8", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5bb109f9-1208-420b-b23f-988b3d8e7d9d", "target_ref": "indicator--9d69c06a-0d35-4dd5-9d91-5ffe2d1bae65" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0218ddd6-f255-4123-a90f-98d63e52a84f", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5bb109f9-1208-420b-b23f-988b3d8e7d9d", "target_ref": "indicator--7c6c82b8-d50e-4275-8d40-7231e7388385" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c4abdcb-8ca1-4363-b842-1ed7fa1f102c", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--7c6c82b8-d50e-4275-8d40-7231e7388385", "target_ref": "indicator--9d69c06a-0d35-4dd5-9d91-5ffe2d1bae65" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ea6e11d9-911a-4691-bfcf-72507cbe03c8", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--7c6c82b8-d50e-4275-8d40-7231e7388385", "target_ref": "indicator--5bb109f9-1208-420b-b23f-988b3d8e7d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bffd7738-e7d7-4784-b56e-474333287bb2", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--661e198a-dfc1-4915-90d2-d7cc4722b92f", "target_ref": "indicator--9d5aad6f-3625-4fc4-9d9e-7d0c6e59a0f7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e758c87-be26-424e-b0cd-ae775ed2af8e", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--661e198a-dfc1-4915-90d2-d7cc4722b92f", "target_ref": "indicator--3f00a455-93e3-4a5a-96d1-cf326c0d15aa" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4526de51-b7d5-450d-b812-78d3a26af076", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--9d5aad6f-3625-4fc4-9d9e-7d0c6e59a0f7", "target_ref": "indicator--661e198a-dfc1-4915-90d2-d7cc4722b92f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0fb5b947-580d-4022-bdab-c04a76fd632c", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--9d5aad6f-3625-4fc4-9d9e-7d0c6e59a0f7", "target_ref": "indicator--3f00a455-93e3-4a5a-96d1-cf326c0d15aa" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b3a39d39-a292-4d92-9851-a2e7b39e54bb", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--3f00a455-93e3-4a5a-96d1-cf326c0d15aa", "target_ref": "indicator--661e198a-dfc1-4915-90d2-d7cc4722b92f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--585c022f-1d94-4856-bb1c-4d1f7595a398", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--3f00a455-93e3-4a5a-96d1-cf326c0d15aa", "target_ref": "indicator--9d5aad6f-3625-4fc4-9d9e-7d0c6e59a0f7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c669b0f-a9ec-4eb0-bbd5-9dada98689cb", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--20c74caf-0094-410e-a6a2-e5a5a53bc1f3", "target_ref": "indicator--6c731b78-d08a-4da5-8d82-837035a4f9f5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5b1a4e7-eab8-4ba7-adc7-6ae2c380c8f2", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--20c74caf-0094-410e-a6a2-e5a5a53bc1f3", "target_ref": "indicator--1b23b0f1-f289-4e4e-9d1a-a893400cc0da" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3bbe5663-91fd-4a09-a4f4-e62477a4adc5", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--20c74caf-0094-410e-a6a2-e5a5a53bc1f3", "target_ref": "indicator--fd319899-a1e1-4d82-9ec4-624c34f81db2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e38b7984-6061-4b06-ad10-a040690cecb0", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6c731b78-d08a-4da5-8d82-837035a4f9f5", "target_ref": "indicator--20c74caf-0094-410e-a6a2-e5a5a53bc1f3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--74a6c4d9-72d7-4f19-ac2c-e645c390c86e", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6c731b78-d08a-4da5-8d82-837035a4f9f5", "target_ref": "indicator--1b23b0f1-f289-4e4e-9d1a-a893400cc0da" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--66742ca1-13d4-44a8-bdbd-ad50d8d4578c", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6c731b78-d08a-4da5-8d82-837035a4f9f5", "target_ref": "indicator--fd319899-a1e1-4d82-9ec4-624c34f81db2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7673c240-7ab9-42d3-9c7b-021b6f0dcfbd", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--1b23b0f1-f289-4e4e-9d1a-a893400cc0da", "target_ref": "indicator--20c74caf-0094-410e-a6a2-e5a5a53bc1f3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3302c9bd-a361-41f1-96d9-83ea548b4a27", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--1b23b0f1-f289-4e4e-9d1a-a893400cc0da", "target_ref": "indicator--6c731b78-d08a-4da5-8d82-837035a4f9f5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53de888b-ea98-4a13-8ac9-d4abb99797b2", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--1b23b0f1-f289-4e4e-9d1a-a893400cc0da", "target_ref": "indicator--fd319899-a1e1-4d82-9ec4-624c34f81db2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9a82a5c6-9ee5-4a79-a2f4-aefaed57e719", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fd319899-a1e1-4d82-9ec4-624c34f81db2", "target_ref": "indicator--20c74caf-0094-410e-a6a2-e5a5a53bc1f3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec2574cb-b252-470a-ae92-79094d0782c7", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fd319899-a1e1-4d82-9ec4-624c34f81db2", "target_ref": "indicator--6c731b78-d08a-4da5-8d82-837035a4f9f5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f374e36b-54ea-4a24-9bf3-58461faf365a", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fd319899-a1e1-4d82-9ec4-624c34f81db2", "target_ref": "indicator--1b23b0f1-f289-4e4e-9d1a-a893400cc0da" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c23f3716-5e21-4fc2-8e47-dba431d6b82c", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fca6bfba-3b9a-4bc8-b8c9-a573a2987aa3", "target_ref": "indicator--2f5504f2-a62b-469a-8850-29ac9b831f78" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d800ad89-6880-4646-ac48-f67b6a42b468", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fca6bfba-3b9a-4bc8-b8c9-a573a2987aa3", "target_ref": "indicator--e3faf8e8-84be-4904-9f78-43a0577807da" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--62484ddf-c3eb-4b1a-b986-cc33853cf4f3", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fca6bfba-3b9a-4bc8-b8c9-a573a2987aa3", "target_ref": "indicator--12abfb3c-89d8-4751-bc8c-4fe10c376dd7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--092259e1-5f96-44c5-ba29-0970666fe248", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--2f5504f2-a62b-469a-8850-29ac9b831f78", "target_ref": "indicator--fca6bfba-3b9a-4bc8-b8c9-a573a2987aa3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--636511b7-61cb-4710-9919-c9b37e6e8f14", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--2f5504f2-a62b-469a-8850-29ac9b831f78", "target_ref": "indicator--e3faf8e8-84be-4904-9f78-43a0577807da" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f51c56aa-38cb-4948-aade-cacc8267e42d", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--2f5504f2-a62b-469a-8850-29ac9b831f78", "target_ref": "indicator--12abfb3c-89d8-4751-bc8c-4fe10c376dd7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a3a128d-d3ee-42a7-9c03-0b559fc7a835", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--e3faf8e8-84be-4904-9f78-43a0577807da", "target_ref": "indicator--fca6bfba-3b9a-4bc8-b8c9-a573a2987aa3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca9a443a-ffe4-4e5b-a870-811ba312d8d2", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--e3faf8e8-84be-4904-9f78-43a0577807da", "target_ref": "indicator--2f5504f2-a62b-469a-8850-29ac9b831f78" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2c20ce6e-16f1-46e4-90a4-22093c732254", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--e3faf8e8-84be-4904-9f78-43a0577807da", "target_ref": "indicator--12abfb3c-89d8-4751-bc8c-4fe10c376dd7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bf24612e-81e9-483d-857c-a7f8bd94d787", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--12abfb3c-89d8-4751-bc8c-4fe10c376dd7", "target_ref": "indicator--fca6bfba-3b9a-4bc8-b8c9-a573a2987aa3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c1b58456-9d03-4343-842f-3b2f61bb0188", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--12abfb3c-89d8-4751-bc8c-4fe10c376dd7", "target_ref": "indicator--2f5504f2-a62b-469a-8850-29ac9b831f78" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0c7c419c-4916-481b-bf57-68b85f575187", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--12abfb3c-89d8-4751-bc8c-4fe10c376dd7", "target_ref": "indicator--e3faf8e8-84be-4904-9f78-43a0577807da" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--23838cf3-c0a4-442d-9123-1223fda0ad4d", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--b01bf8e2-af1f-40a3-a91d-7405aeac0fe9", "target_ref": "indicator--dd67eb53-f9af-4931-904e-7fa9f32f957c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--659ce7ce-add6-47fb-945c-dc62683a4f4d", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--b01bf8e2-af1f-40a3-a91d-7405aeac0fe9", "target_ref": "indicator--8c405500-14a9-4a16-98b4-3663bf7b2b1c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--384bedbe-9e22-43c4-81cd-c15f25fad6aa", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--b01bf8e2-af1f-40a3-a91d-7405aeac0fe9", "target_ref": "indicator--1e9a0ecc-2d71-4f93-b971-18af95ff2e9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2ca0fabb-7bd8-4583-a040-f3bea704cacc", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--dd67eb53-f9af-4931-904e-7fa9f32f957c", "target_ref": "indicator--b01bf8e2-af1f-40a3-a91d-7405aeac0fe9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dcc145a7-0cd9-47da-a0f6-8cf1736afc39", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--dd67eb53-f9af-4931-904e-7fa9f32f957c", "target_ref": "indicator--8c405500-14a9-4a16-98b4-3663bf7b2b1c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a5fb1d9-9cec-43f3-9f1a-e77c5139bf8d", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--dd67eb53-f9af-4931-904e-7fa9f32f957c", "target_ref": "indicator--1e9a0ecc-2d71-4f93-b971-18af95ff2e9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0fe46d05-8ff2-4f7a-bb7b-725318cd96cb", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--8c405500-14a9-4a16-98b4-3663bf7b2b1c", "target_ref": "indicator--b01bf8e2-af1f-40a3-a91d-7405aeac0fe9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f1027043-1664-4ed9-af6b-77ba2e42afca", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--8c405500-14a9-4a16-98b4-3663bf7b2b1c", "target_ref": "indicator--dd67eb53-f9af-4931-904e-7fa9f32f957c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c7fe5c09-e21c-4c95-8bdb-df33953126a6", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--8c405500-14a9-4a16-98b4-3663bf7b2b1c", "target_ref": "indicator--1e9a0ecc-2d71-4f93-b971-18af95ff2e9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--758d88ee-5a1f-4a48-b2da-682c150cf938", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--1e9a0ecc-2d71-4f93-b971-18af95ff2e9d", "target_ref": "indicator--b01bf8e2-af1f-40a3-a91d-7405aeac0fe9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9edd9e24-5a4e-4526-9a0d-fd8a4da70528", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--1e9a0ecc-2d71-4f93-b971-18af95ff2e9d", "target_ref": "indicator--dd67eb53-f9af-4931-904e-7fa9f32f957c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e805e373-50fa-4d71-9dc5-c3a809844bc6", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--1e9a0ecc-2d71-4f93-b971-18af95ff2e9d", "target_ref": "indicator--8c405500-14a9-4a16-98b4-3663bf7b2b1c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7526b707-5ba2-4c30-93df-847a2885b5ff", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--745bf2b7-8c3d-4f81-b685-9476cde9a9e2", "target_ref": "indicator--2c479d4a-7d3c-4216-8637-ea18bfd7acca" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--512143e9-571d-4743-b6c2-1408fb585378", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--745bf2b7-8c3d-4f81-b685-9476cde9a9e2", "target_ref": "indicator--b69e2980-9cb6-42e4-b761-ccf9a72743c9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c1ef317a-9fa0-4d9e-9f16-3dbe359927e6", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--2c479d4a-7d3c-4216-8637-ea18bfd7acca", "target_ref": "indicator--745bf2b7-8c3d-4f81-b685-9476cde9a9e2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5435c1d-64e1-4ad4-bceb-848df689c008", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--2c479d4a-7d3c-4216-8637-ea18bfd7acca", "target_ref": "indicator--b69e2980-9cb6-42e4-b761-ccf9a72743c9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a270ee40-c539-4a53-95ce-715bb60288e1", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--b69e2980-9cb6-42e4-b761-ccf9a72743c9", "target_ref": "indicator--745bf2b7-8c3d-4f81-b685-9476cde9a9e2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09a3c138-2699-447e-b0e3-f4c4718c1af1", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--b69e2980-9cb6-42e4-b761-ccf9a72743c9", "target_ref": "indicator--2c479d4a-7d3c-4216-8637-ea18bfd7acca" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eab113b8-53ed-4df0-b360-8c202f91fa34", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--9963d2db-63d5-4be4-98a6-80cf9eab6e93", "target_ref": "indicator--a6bef973-0eb2-42b9-aeb7-9dadf04c5cbd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe6d9747-1965-461a-887e-52ac5a4e82ed", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--9963d2db-63d5-4be4-98a6-80cf9eab6e93", "target_ref": "indicator--b38b5856-89d0-40d2-a738-c4c10bc743ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--33f2dc0d-1c18-4a61-b24d-33db3c54d6b8", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--9963d2db-63d5-4be4-98a6-80cf9eab6e93", "target_ref": "indicator--289fa967-5299-49d2-bfea-d0f87686b94a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6beaa4c0-3bc3-47e0-bf70-33179f824323", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--a6bef973-0eb2-42b9-aeb7-9dadf04c5cbd", "target_ref": "indicator--9963d2db-63d5-4be4-98a6-80cf9eab6e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ace46fb7-e913-45f3-ba78-b38a6dd5956a", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--a6bef973-0eb2-42b9-aeb7-9dadf04c5cbd", "target_ref": "indicator--b38b5856-89d0-40d2-a738-c4c10bc743ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1aea8a68-f450-4138-9cc2-69995b78faa7", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--a6bef973-0eb2-42b9-aeb7-9dadf04c5cbd", "target_ref": "indicator--289fa967-5299-49d2-bfea-d0f87686b94a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--29019c32-7b3f-4938-9e42-9acefe544420", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--b38b5856-89d0-40d2-a738-c4c10bc743ba", "target_ref": "indicator--9963d2db-63d5-4be4-98a6-80cf9eab6e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--26f467ec-8b27-4193-bcc6-45885c654e30", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--b38b5856-89d0-40d2-a738-c4c10bc743ba", "target_ref": "indicator--a6bef973-0eb2-42b9-aeb7-9dadf04c5cbd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa466b73-f307-483d-aa33-5b894646ff3b", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--b38b5856-89d0-40d2-a738-c4c10bc743ba", "target_ref": "indicator--289fa967-5299-49d2-bfea-d0f87686b94a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec3de4b8-b65f-48c9-994c-27a7caee8240", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--289fa967-5299-49d2-bfea-d0f87686b94a", "target_ref": "indicator--9963d2db-63d5-4be4-98a6-80cf9eab6e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8fb6865-47bc-4d84-9fcc-e7558873f5bc", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--289fa967-5299-49d2-bfea-d0f87686b94a", "target_ref": "indicator--a6bef973-0eb2-42b9-aeb7-9dadf04c5cbd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--016d6927-5792-48d9-a3aa-39f65e562c52", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--289fa967-5299-49d2-bfea-d0f87686b94a", "target_ref": "indicator--b38b5856-89d0-40d2-a738-c4c10bc743ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d6a793a5-73a2-4f7c-8b08-dda99c6b2fa1", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--cc454800-1716-4e0f-9c70-a88c16bbcaac", "target_ref": "indicator--775698f0-823f-4097-ab3f-e5f5bb2a2dad" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01e2afa0-a689-4a6b-abae-372d5738ed05", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--cc454800-1716-4e0f-9c70-a88c16bbcaac", "target_ref": "indicator--6a7777fc-fcf1-42a8-bb3d-0d5b5bae5bee" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--85a53081-f865-4a41-b774-2fa6ea77460f", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--cc454800-1716-4e0f-9c70-a88c16bbcaac", "target_ref": "indicator--4e41c7f0-1e95-4377-8af4-1194adf149df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--056a59d9-1540-464c-835c-8310951e62ca", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--775698f0-823f-4097-ab3f-e5f5bb2a2dad", "target_ref": "indicator--cc454800-1716-4e0f-9c70-a88c16bbcaac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f0c2c558-da96-45a1-b182-601e5beb7ff0", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--775698f0-823f-4097-ab3f-e5f5bb2a2dad", "target_ref": "indicator--6a7777fc-fcf1-42a8-bb3d-0d5b5bae5bee" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--76115475-6b72-4da9-8d30-37cee86bcf82", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--775698f0-823f-4097-ab3f-e5f5bb2a2dad", "target_ref": "indicator--4e41c7f0-1e95-4377-8af4-1194adf149df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4d34e4ef-e239-442b-bb6e-c27f1afc52c3", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6a7777fc-fcf1-42a8-bb3d-0d5b5bae5bee", "target_ref": "indicator--cc454800-1716-4e0f-9c70-a88c16bbcaac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8eda4db-9d9a-4732-9ac9-91b7cd20802e", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6a7777fc-fcf1-42a8-bb3d-0d5b5bae5bee", "target_ref": "indicator--775698f0-823f-4097-ab3f-e5f5bb2a2dad" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5dfa12d1-29e0-4653-9e72-440abec14b40", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6a7777fc-fcf1-42a8-bb3d-0d5b5bae5bee", "target_ref": "indicator--4e41c7f0-1e95-4377-8af4-1194adf149df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--845da4c6-0bd7-407a-8948-2cea66df547b", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--4e41c7f0-1e95-4377-8af4-1194adf149df", "target_ref": "indicator--cc454800-1716-4e0f-9c70-a88c16bbcaac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--06bc4147-6d88-4df6-b0c9-5ab65d49af16", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--4e41c7f0-1e95-4377-8af4-1194adf149df", "target_ref": "indicator--775698f0-823f-4097-ab3f-e5f5bb2a2dad" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c4e3173f-e3c2-4b53-8979-91e5a0d0a453", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--4e41c7f0-1e95-4377-8af4-1194adf149df", "target_ref": "indicator--6a7777fc-fcf1-42a8-bb3d-0d5b5bae5bee" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6ba6740b-e582-4ac8-a2ab-df3f546a5907", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6525da31-9ed9-452e-8a04-c6ec637193d1", "target_ref": "indicator--9e976387-d505-4a49-be59-ed61ef6b2b35" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b7c66d1-43f8-4ddc-8254-a2ef62adc5ad", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6525da31-9ed9-452e-8a04-c6ec637193d1", "target_ref": "indicator--3efee39a-b44f-4b5b-a0b7-81bc315c59eb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7838bf6e-90dc-4b69-bbd4-992ea2b47aae", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6525da31-9ed9-452e-8a04-c6ec637193d1", "target_ref": "indicator--fb71a02f-95fb-414e-adee-c9020dcad5d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--72a4b99a-c656-4596-b31b-5f03c5a2baaf", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--9e976387-d505-4a49-be59-ed61ef6b2b35", "target_ref": "indicator--6525da31-9ed9-452e-8a04-c6ec637193d1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--06fc3451-80a6-4a82-bd1d-def073dc28bd", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--9e976387-d505-4a49-be59-ed61ef6b2b35", "target_ref": "indicator--3efee39a-b44f-4b5b-a0b7-81bc315c59eb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4a0b6873-e833-4f35-9b3d-001f176498c5", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--9e976387-d505-4a49-be59-ed61ef6b2b35", "target_ref": "indicator--fb71a02f-95fb-414e-adee-c9020dcad5d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--281c1086-2af7-4959-bbe9-c60f449d3e79", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--3efee39a-b44f-4b5b-a0b7-81bc315c59eb", "target_ref": "indicator--6525da31-9ed9-452e-8a04-c6ec637193d1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--181debf1-edd5-4e0d-a47a-400165f73be1", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--3efee39a-b44f-4b5b-a0b7-81bc315c59eb", "target_ref": "indicator--9e976387-d505-4a49-be59-ed61ef6b2b35" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1a94af0a-8c54-4618-8cc8-f544a59921ad", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--3efee39a-b44f-4b5b-a0b7-81bc315c59eb", "target_ref": "indicator--fb71a02f-95fb-414e-adee-c9020dcad5d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--51f6ed7e-cc26-43d7-883d-656c33698bd5", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fb71a02f-95fb-414e-adee-c9020dcad5d2", "target_ref": "indicator--6525da31-9ed9-452e-8a04-c6ec637193d1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--564c401d-9adc-4439-b66b-de0e385a4109", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fb71a02f-95fb-414e-adee-c9020dcad5d2", "target_ref": "indicator--9e976387-d505-4a49-be59-ed61ef6b2b35" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0272172a-366d-490a-aee9-e6a58887b275", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fb71a02f-95fb-414e-adee-c9020dcad5d2", "target_ref": "indicator--3efee39a-b44f-4b5b-a0b7-81bc315c59eb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e89cdc94-7502-43a4-8e66-fdc8e56c0f9d", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--c0951c81-2124-49b9-af1f-be31748abd7f", "target_ref": "indicator--627af53b-68be-412b-8168-7ecf0469ccd4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3413b48-3e42-4cd4-bb9a-55c195efb3bb", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--c0951c81-2124-49b9-af1f-be31748abd7f", "target_ref": "indicator--8ebce1f6-0445-4807-858e-3d52dc0541c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1284b8ea-d772-4296-a7d7-8311cc6c2155", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--627af53b-68be-412b-8168-7ecf0469ccd4", "target_ref": "indicator--c0951c81-2124-49b9-af1f-be31748abd7f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--045c6688-9f87-4403-918e-06d93c6f772c", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--627af53b-68be-412b-8168-7ecf0469ccd4", "target_ref": "indicator--8ebce1f6-0445-4807-858e-3d52dc0541c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7ee4210a-403c-4816-b045-d2fb75f0591f", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--8ebce1f6-0445-4807-858e-3d52dc0541c1", "target_ref": "indicator--c0951c81-2124-49b9-af1f-be31748abd7f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4f8cb713-48f4-486e-a0b1-36e446e0818b", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--8ebce1f6-0445-4807-858e-3d52dc0541c1", "target_ref": "indicator--627af53b-68be-412b-8168-7ecf0469ccd4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d35613b3-c87a-4712-915d-5c827d0049d7", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--42352416-115b-4d76-af2c-b4898bfb5611", "target_ref": "indicator--f1804e4b-4fc8-4e95-bbf3-cb990d607071" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bf2c7b30-babb-41d0-8cf7-5174c4c882aa", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--42352416-115b-4d76-af2c-b4898bfb5611", "target_ref": "indicator--5170e2e6-833d-4fce-a434-15eb3a5e0867" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cfcfcd33-5a0c-46b3-b96c-c8a931de5877", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f1804e4b-4fc8-4e95-bbf3-cb990d607071", "target_ref": "indicator--42352416-115b-4d76-af2c-b4898bfb5611" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f59d4478-ce00-4d70-be97-b6ea174c5b7a", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f1804e4b-4fc8-4e95-bbf3-cb990d607071", "target_ref": "indicator--5170e2e6-833d-4fce-a434-15eb3a5e0867" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49a8fd39-fc7f-4e38-b694-85229dd62435", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5170e2e6-833d-4fce-a434-15eb3a5e0867", "target_ref": "indicator--42352416-115b-4d76-af2c-b4898bfb5611" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--60c83e4e-9ae6-4538-9d32-5cd5feb86ad0", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5170e2e6-833d-4fce-a434-15eb3a5e0867", "target_ref": "indicator--f1804e4b-4fc8-4e95-bbf3-cb990d607071" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cf4d7019-3978-475c-a3cc-33485cba864c", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--16a2b295-564d-4f6c-8815-d5ca336bca90", "target_ref": "indicator--7db30756-5877-4df5-9e28-a350f23a98f4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9edf15d6-1e12-4a4b-a879-6087215d9740", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--16a2b295-564d-4f6c-8815-d5ca336bca90", "target_ref": "indicator--d489006c-fbf6-4870-a562-f7a902dcaab9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--02f4e0a7-621c-41a8-9f28-eefd5e0b078f", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--16a2b295-564d-4f6c-8815-d5ca336bca90", "target_ref": "indicator--bde7895f-75d9-4707-a581-c338c54b7c49" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--006a6fa7-2442-4538-b088-4dc360e4dd99", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--7db30756-5877-4df5-9e28-a350f23a98f4", "target_ref": "indicator--16a2b295-564d-4f6c-8815-d5ca336bca90" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d45c0fca-48dd-44b3-bd0f-ce8c7bd00c0f", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--7db30756-5877-4df5-9e28-a350f23a98f4", "target_ref": "indicator--d489006c-fbf6-4870-a562-f7a902dcaab9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--782838e4-5413-4b19-b1d4-a8c4dc313754", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--7db30756-5877-4df5-9e28-a350f23a98f4", "target_ref": "indicator--bde7895f-75d9-4707-a581-c338c54b7c49" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--498bce39-506c-4589-a010-ce8c8a3ae06f", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--d489006c-fbf6-4870-a562-f7a902dcaab9", "target_ref": "indicator--16a2b295-564d-4f6c-8815-d5ca336bca90" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b46264d-808b-424b-bd1a-dfb8e3170221", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--d489006c-fbf6-4870-a562-f7a902dcaab9", "target_ref": "indicator--7db30756-5877-4df5-9e28-a350f23a98f4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b8560b7-a3dc-4006-9293-612fffd63649", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--d489006c-fbf6-4870-a562-f7a902dcaab9", "target_ref": "indicator--bde7895f-75d9-4707-a581-c338c54b7c49" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ad9f0446-8324-4fed-9b18-34e22faedb03", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--bde7895f-75d9-4707-a581-c338c54b7c49", "target_ref": "indicator--16a2b295-564d-4f6c-8815-d5ca336bca90" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bc1a2a0a-09ab-4c88-ab7f-3ce184ebeca6", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--bde7895f-75d9-4707-a581-c338c54b7c49", "target_ref": "indicator--7db30756-5877-4df5-9e28-a350f23a98f4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5aaf36e7-bcd5-453c-be4e-279a461f4dac", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--bde7895f-75d9-4707-a581-c338c54b7c49", "target_ref": "indicator--d489006c-fbf6-4870-a562-f7a902dcaab9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c1b367a1-6a57-47be-b817-b2e847bcac86", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--2443a0e6-3efb-4b7d-8615-19721e907871", "target_ref": "indicator--6042c3c8-11bc-4638-829d-b93c13f36a6d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dbb0734d-099d-447f-bec2-6fbfdb6f71e3", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--2443a0e6-3efb-4b7d-8615-19721e907871", "target_ref": "indicator--2607073d-ade7-4e9f-9f54-419dcafab37a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9e200e98-e94b-45e7-9bc9-f7030e4ff39f", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6042c3c8-11bc-4638-829d-b93c13f36a6d", "target_ref": "indicator--2443a0e6-3efb-4b7d-8615-19721e907871" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd1a1c37-61ea-42ab-823f-d58a1661bd98", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6042c3c8-11bc-4638-829d-b93c13f36a6d", "target_ref": "indicator--2607073d-ade7-4e9f-9f54-419dcafab37a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53b87420-56f4-444f-9f1b-7f3f9f2272a9", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--2607073d-ade7-4e9f-9f54-419dcafab37a", "target_ref": "indicator--2443a0e6-3efb-4b7d-8615-19721e907871" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb654455-299a-4580-9b7e-f0059d6c80a2", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--2607073d-ade7-4e9f-9f54-419dcafab37a", "target_ref": "indicator--6042c3c8-11bc-4638-829d-b93c13f36a6d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--83c8805e-2002-4a2d-b513-bd887924342c", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--559f775c-ada9-4214-aa2a-bbef6aa5d4a0", "target_ref": "indicator--8ae06188-93ff-4a45-be6c-38087289a816" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e08f77d7-c955-4c5f-b2f2-7b686ab45e35", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--559f775c-ada9-4214-aa2a-bbef6aa5d4a0", "target_ref": "indicator--679e97de-ee22-4cce-860d-3095ebc64c7b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f98ec767-d2a2-4386-9800-c6ed357ac084", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--8ae06188-93ff-4a45-be6c-38087289a816", "target_ref": "indicator--559f775c-ada9-4214-aa2a-bbef6aa5d4a0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a9cc7b8c-493e-4061-8492-bcfadcbc37e2", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--8ae06188-93ff-4a45-be6c-38087289a816", "target_ref": "indicator--679e97de-ee22-4cce-860d-3095ebc64c7b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0b287cfd-c9a5-48b0-a45b-4c9250f8d1be", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--679e97de-ee22-4cce-860d-3095ebc64c7b", "target_ref": "indicator--559f775c-ada9-4214-aa2a-bbef6aa5d4a0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f623bc2-413b-42f9-89e8-559a84bcdf69", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--679e97de-ee22-4cce-860d-3095ebc64c7b", "target_ref": "indicator--8ae06188-93ff-4a45-be6c-38087289a816" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--54d67d43-3eaa-4a7a-bec5-86efb8b6273a", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f55e05d8-804d-44af-8ec1-32a4a9eb31d7", "target_ref": "indicator--f475ad15-765d-4e90-aa5d-3042f47857a1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--58202529-a694-4e83-9058-1b3311ea02e7", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f55e05d8-804d-44af-8ec1-32a4a9eb31d7", "target_ref": "indicator--ce293b5c-8816-4923-be3a-f40134a4e022" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--053835a1-80ab-426a-bd4e-103c1fbc588c", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f55e05d8-804d-44af-8ec1-32a4a9eb31d7", "target_ref": "indicator--244de742-9fc5-4784-b9c5-083133b094bb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--82959068-17ed-4763-8b72-91853e3cbc93", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f475ad15-765d-4e90-aa5d-3042f47857a1", "target_ref": "indicator--f55e05d8-804d-44af-8ec1-32a4a9eb31d7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--62ac26b2-eb6f-4994-a4ee-c976b250ea65", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f475ad15-765d-4e90-aa5d-3042f47857a1", "target_ref": "indicator--ce293b5c-8816-4923-be3a-f40134a4e022" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7a083bd2-42b8-48b5-88f0-739f5da09f2d", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f475ad15-765d-4e90-aa5d-3042f47857a1", "target_ref": "indicator--244de742-9fc5-4784-b9c5-083133b094bb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--572882e6-c72f-4568-a286-877bbce4f80a", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--ce293b5c-8816-4923-be3a-f40134a4e022", "target_ref": "indicator--f55e05d8-804d-44af-8ec1-32a4a9eb31d7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5aa862cc-5fda-4edf-b3bd-6da4cac570dc", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--ce293b5c-8816-4923-be3a-f40134a4e022", "target_ref": "indicator--f475ad15-765d-4e90-aa5d-3042f47857a1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18e88769-bcde-456f-988b-80e70d0dab3e", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--ce293b5c-8816-4923-be3a-f40134a4e022", "target_ref": "indicator--244de742-9fc5-4784-b9c5-083133b094bb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2097b37-d811-4766-89b1-40ba282636a1", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--244de742-9fc5-4784-b9c5-083133b094bb", "target_ref": "indicator--f55e05d8-804d-44af-8ec1-32a4a9eb31d7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--261eead1-3cc3-45db-b88d-8ccab9e10324", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--244de742-9fc5-4784-b9c5-083133b094bb", "target_ref": "indicator--f475ad15-765d-4e90-aa5d-3042f47857a1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--501f8497-587e-4c6c-b1cf-b35ad4a30a53", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--244de742-9fc5-4784-b9c5-083133b094bb", "target_ref": "indicator--ce293b5c-8816-4923-be3a-f40134a4e022" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--36653c9f-381f-44a9-9cb5-4ccd54d620c1", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--71dd59b8-f865-4090-a489-8c64ac420b53", "target_ref": "indicator--764660ad-06e9-4541-83ab-b7d4b862e2b9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4091a93f-ae85-45d0-b52b-bf0fc42f859a", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--71dd59b8-f865-4090-a489-8c64ac420b53", "target_ref": "indicator--6c797b87-276f-4a89-a12f-8b5e1a798d2a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ac0c340f-d5ee-48d8-8134-6c189ab50554", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--764660ad-06e9-4541-83ab-b7d4b862e2b9", "target_ref": "indicator--71dd59b8-f865-4090-a489-8c64ac420b53" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a9cc2dd7-67cc-464c-bf05-b30d957ca53e", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--764660ad-06e9-4541-83ab-b7d4b862e2b9", "target_ref": "indicator--6c797b87-276f-4a89-a12f-8b5e1a798d2a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--354a93b1-9464-4ba4-b5ae-ba1a9f3dc5c2", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6c797b87-276f-4a89-a12f-8b5e1a798d2a", "target_ref": "indicator--71dd59b8-f865-4090-a489-8c64ac420b53" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb6d378d-c7c7-415d-9719-4440448f6ba5", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6c797b87-276f-4a89-a12f-8b5e1a798d2a", "target_ref": "indicator--764660ad-06e9-4541-83ab-b7d4b862e2b9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--54ee9701-5f21-42ea-bbb6-cd6987b07298", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fc870802-12b1-471b-8d80-03a8a9eb65d9", "target_ref": "indicator--71b931b2-9680-45a5-9e4d-13ab1a833e50" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a8375c7a-12c9-4253-a245-e90dde31ac2b", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fc870802-12b1-471b-8d80-03a8a9eb65d9", "target_ref": "indicator--39515c04-89fd-4cc2-9dd0-107331d90850" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8cb72d4b-2223-4d95-8ad9-35b62cbe2f76", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fc870802-12b1-471b-8d80-03a8a9eb65d9", "target_ref": "indicator--8178ffae-a7a3-46a7-85ab-7baf4e9dbea3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3cb762fa-0dc5-4435-bf77-a2b0a8d4a5cc", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--71b931b2-9680-45a5-9e4d-13ab1a833e50", "target_ref": "indicator--fc870802-12b1-471b-8d80-03a8a9eb65d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--82cc8387-13e0-413e-93a6-275bb30b1ae6", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--71b931b2-9680-45a5-9e4d-13ab1a833e50", "target_ref": "indicator--39515c04-89fd-4cc2-9dd0-107331d90850" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47390c1e-04e9-4795-a48f-f7b9bcffda68", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--71b931b2-9680-45a5-9e4d-13ab1a833e50", "target_ref": "indicator--8178ffae-a7a3-46a7-85ab-7baf4e9dbea3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--25546167-64c8-46ee-947b-ae803068ea83", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--39515c04-89fd-4cc2-9dd0-107331d90850", "target_ref": "indicator--fc870802-12b1-471b-8d80-03a8a9eb65d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ef01f210-ee31-4fc5-a71f-e1844c8e6a60", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--39515c04-89fd-4cc2-9dd0-107331d90850", "target_ref": "indicator--71b931b2-9680-45a5-9e4d-13ab1a833e50" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c223cd11-ef8a-4b15-8fc2-934c96e02480", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--39515c04-89fd-4cc2-9dd0-107331d90850", "target_ref": "indicator--8178ffae-a7a3-46a7-85ab-7baf4e9dbea3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c08ddc6d-664a-4e0b-8d76-b9cfcc299775", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--8178ffae-a7a3-46a7-85ab-7baf4e9dbea3", "target_ref": "indicator--fc870802-12b1-471b-8d80-03a8a9eb65d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0571b7a7-1093-4911-b13e-946a27b443cc", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--8178ffae-a7a3-46a7-85ab-7baf4e9dbea3", "target_ref": "indicator--71b931b2-9680-45a5-9e4d-13ab1a833e50" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d72e8581-4628-4abf-98a7-d817b65f2234", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--8178ffae-a7a3-46a7-85ab-7baf4e9dbea3", "target_ref": "indicator--39515c04-89fd-4cc2-9dd0-107331d90850" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--27cb20f5-58f4-4a21-a9e0-4f8d969e5b2e", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--02e50c7c-f882-4878-b777-fa7e50b9071e", "target_ref": "indicator--be27adea-c70d-478f-bc25-513bc30bb5d0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9c6929c-028b-4a6a-b783-37131f5f9d10", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--02e50c7c-f882-4878-b777-fa7e50b9071e", "target_ref": "indicator--472c6111-5abb-4ca9-93da-9efdddbf098a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c788c351-bf90-439a-9b65-be40382aa6c5", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--02e50c7c-f882-4878-b777-fa7e50b9071e", "target_ref": "indicator--db538a27-eda1-4837-b1d5-3963fb903843" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba80103c-e629-4384-b7dc-8c72e44f3db3", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--be27adea-c70d-478f-bc25-513bc30bb5d0", "target_ref": "indicator--02e50c7c-f882-4878-b777-fa7e50b9071e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b6d585f-88c1-41d8-b58d-f26a65ff9a53", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--be27adea-c70d-478f-bc25-513bc30bb5d0", "target_ref": "indicator--472c6111-5abb-4ca9-93da-9efdddbf098a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4237c9ad-9362-4af4-b53b-7b062b71b5e5", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--be27adea-c70d-478f-bc25-513bc30bb5d0", "target_ref": "indicator--db538a27-eda1-4837-b1d5-3963fb903843" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba79fa8e-ee73-4151-aba4-17184d0a535a", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--472c6111-5abb-4ca9-93da-9efdddbf098a", "target_ref": "indicator--02e50c7c-f882-4878-b777-fa7e50b9071e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d896fc5e-9a7b-42bf-ab1d-9d60214d1a6a", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--472c6111-5abb-4ca9-93da-9efdddbf098a", "target_ref": "indicator--be27adea-c70d-478f-bc25-513bc30bb5d0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cce82995-3753-4c2c-a60b-995180272b6c", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--472c6111-5abb-4ca9-93da-9efdddbf098a", "target_ref": "indicator--db538a27-eda1-4837-b1d5-3963fb903843" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d1cf51f1-2eb6-49e4-9048-6bec51643c73", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--db538a27-eda1-4837-b1d5-3963fb903843", "target_ref": "indicator--02e50c7c-f882-4878-b777-fa7e50b9071e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1c09d003-8c6f-4abf-829a-aa19727ba95c", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--db538a27-eda1-4837-b1d5-3963fb903843", "target_ref": "indicator--be27adea-c70d-478f-bc25-513bc30bb5d0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3adbb379-b9e7-4824-9117-3dfc4550d771", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--db538a27-eda1-4837-b1d5-3963fb903843", "target_ref": "indicator--472c6111-5abb-4ca9-93da-9efdddbf098a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--afcc051f-ecf6-4981-ae33-1cf108182c5b", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--d9c23180-b74e-4fd8-bd7f-aaf6eb501a48", "target_ref": "indicator--5334a7ac-c157-4c91-91b6-35334f9f8e83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7dafac17-62ae-49ca-80ab-d2e0a5ef5474", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--d9c23180-b74e-4fd8-bd7f-aaf6eb501a48", "target_ref": "indicator--cebb8ff0-418a-4503-80e3-9fc926346e79" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3d3c2472-381e-4d23-8ffd-13094e1747a6", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--d9c23180-b74e-4fd8-bd7f-aaf6eb501a48", "target_ref": "indicator--59f89497-bdba-46fe-bb86-6de9e9309b7f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c77e1305-a30e-4380-ae58-0f81591119b3", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5334a7ac-c157-4c91-91b6-35334f9f8e83", "target_ref": "indicator--d9c23180-b74e-4fd8-bd7f-aaf6eb501a48" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c7343198-9475-41eb-b0cf-b30c83ce3161", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5334a7ac-c157-4c91-91b6-35334f9f8e83", "target_ref": "indicator--cebb8ff0-418a-4503-80e3-9fc926346e79" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b0d4faa9-3c45-45a9-afcc-a058d40b2e1a", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5334a7ac-c157-4c91-91b6-35334f9f8e83", "target_ref": "indicator--59f89497-bdba-46fe-bb86-6de9e9309b7f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e06427d4-32af-4a3d-bf8c-85d54ac9889a", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--cebb8ff0-418a-4503-80e3-9fc926346e79", "target_ref": "indicator--d9c23180-b74e-4fd8-bd7f-aaf6eb501a48" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fef900a3-e7aa-4310-9851-67f29ef73f48", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--cebb8ff0-418a-4503-80e3-9fc926346e79", "target_ref": "indicator--5334a7ac-c157-4c91-91b6-35334f9f8e83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5667eb0-cf08-400d-b503-f1f14852adc3", "created": "2021-09-03T15:25:42.349Z", "modified": "2021-09-03T15:25:42.349Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--cebb8ff0-418a-4503-80e3-9fc926346e79", "target_ref": "indicator--59f89497-bdba-46fe-bb86-6de9e9309b7f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a79a907f-dde2-45fd-82d8-c7cacbd6ed6b", "created": "2021-09-03T15:25:42.349Z", "modified": "2021-09-03T15:25:42.349Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--59f89497-bdba-46fe-bb86-6de9e9309b7f", "target_ref": "indicator--d9c23180-b74e-4fd8-bd7f-aaf6eb501a48" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8566249e-aabf-4b9c-a6cf-8b14dc5df775", "created": "2021-09-03T15:25:42.349Z", "modified": "2021-09-03T15:25:42.349Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--59f89497-bdba-46fe-bb86-6de9e9309b7f", "target_ref": "indicator--5334a7ac-c157-4c91-91b6-35334f9f8e83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc37433d-6d40-4d2f-ac3d-fa2176d1bf12", "created": "2021-09-03T15:25:42.349Z", "modified": "2021-09-03T15:25:42.349Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--59f89497-bdba-46fe-bb86-6de9e9309b7f", "target_ref": "indicator--cebb8ff0-418a-4503-80e3-9fc926346e79" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7bc4509c-47ea-472b-8874-fa5940f7d66f", "created": "2021-09-03T15:25:42.349Z", "modified": "2021-09-03T15:25:42.349Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--3c82ae4b-671e-4c8a-aa40-a21adeae929f", "target_ref": "indicator--c2926340-81f7-4a5c-8059-9f787132b3eb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--377fdbf7-4de0-4e7d-974a-a2526dd493cb", "created": "2021-09-03T15:25:42.349Z", "modified": "2021-09-03T15:25:42.349Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--3c82ae4b-671e-4c8a-aa40-a21adeae929f", "target_ref": "indicator--5fc0fcaf-a1df-4357-8aff-765dcf22f06c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--60357d77-76c0-4615-9a02-b896d2371b74", "created": "2021-09-03T15:25:42.349Z", "modified": "2021-09-03T15:25:42.349Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--c2926340-81f7-4a5c-8059-9f787132b3eb", "target_ref": "indicator--3c82ae4b-671e-4c8a-aa40-a21adeae929f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d65af7cb-4f5f-4deb-a984-06678d4a4980", "created": "2021-09-03T15:25:42.349Z", "modified": "2021-09-03T15:25:42.349Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--c2926340-81f7-4a5c-8059-9f787132b3eb", "target_ref": "indicator--5fc0fcaf-a1df-4357-8aff-765dcf22f06c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--668a002a-eb8d-4fd4-b917-c32bed758717", "created": "2021-09-03T15:25:42.350Z", "modified": "2021-09-03T15:25:42.350Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5fc0fcaf-a1df-4357-8aff-765dcf22f06c", "target_ref": "indicator--3c82ae4b-671e-4c8a-aa40-a21adeae929f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ae843a5c-e71a-46a5-ab78-c7b49cb761fe", "created": "2021-09-03T15:25:42.350Z", "modified": "2021-09-03T15:25:42.350Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5fc0fcaf-a1df-4357-8aff-765dcf22f06c", "target_ref": "indicator--c2926340-81f7-4a5c-8059-9f787132b3eb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--36f97824-67f0-42b8-adcb-7b297e892ddf", "created": "2021-09-03T15:25:42.350Z", "modified": "2021-09-03T15:25:42.350Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--a0395017-7063-47ac-957e-80ece65b3056", "target_ref": "indicator--d94bde35-6823-4364-871f-94c8786ca419" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--04fdbd73-a1c3-4a85-96fc-03f6adad0e99", "created": "2021-09-03T15:25:42.350Z", "modified": "2021-09-03T15:25:42.350Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--a0395017-7063-47ac-957e-80ece65b3056", "target_ref": "indicator--361b25ab-d920-4a6d-9246-764ca5721e35" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--879ee26e-6131-4631-b217-3721b8801e21", "created": "2021-09-03T15:25:42.350Z", "modified": "2021-09-03T15:25:42.350Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--d94bde35-6823-4364-871f-94c8786ca419", "target_ref": "indicator--a0395017-7063-47ac-957e-80ece65b3056" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1170f8d-9ba5-4433-be65-3f4881199d7d", "created": "2021-09-03T15:25:42.350Z", "modified": "2021-09-03T15:25:42.350Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--d94bde35-6823-4364-871f-94c8786ca419", "target_ref": "indicator--361b25ab-d920-4a6d-9246-764ca5721e35" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3797d1c-12d8-4afa-adde-cf2fb0424313", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--361b25ab-d920-4a6d-9246-764ca5721e35", "target_ref": "indicator--a0395017-7063-47ac-957e-80ece65b3056" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9d8e6a71-5f1d-43bc-abce-adab9709496c", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--361b25ab-d920-4a6d-9246-764ca5721e35", "target_ref": "indicator--d94bde35-6823-4364-871f-94c8786ca419" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--441891ae-0314-4dbb-bf18-a03f946e3bef", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--76be25aa-e90b-45aa-8661-50bb74b126e5", "target_ref": "indicator--f779084c-d990-412b-8fa7-b337b7520ea9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8bacd667-acc8-4713-a787-377511794317", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--76be25aa-e90b-45aa-8661-50bb74b126e5", "target_ref": "indicator--130b4eb2-ca05-4abf-9e7b-18e83224260a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6f10cfe3-e86a-4a74-93c6-b42f5d4452f3", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f779084c-d990-412b-8fa7-b337b7520ea9", "target_ref": "indicator--76be25aa-e90b-45aa-8661-50bb74b126e5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--83c6c39c-02ba-446a-abb7-0c35a6e9bfc0", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f779084c-d990-412b-8fa7-b337b7520ea9", "target_ref": "indicator--130b4eb2-ca05-4abf-9e7b-18e83224260a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e4e87e1-57fd-4696-bf41-0a05fa7630d3", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--130b4eb2-ca05-4abf-9e7b-18e83224260a", "target_ref": "indicator--76be25aa-e90b-45aa-8661-50bb74b126e5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b58b4618-2eb0-42e6-976b-a1dbe37b9bd8", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--130b4eb2-ca05-4abf-9e7b-18e83224260a", "target_ref": "indicator--f779084c-d990-412b-8fa7-b337b7520ea9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc641d90-94e4-4dbc-9af5-8300079250b0", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f34789e4-9900-46f5-9c2a-7affaaf53505", "target_ref": "indicator--e51475c5-d5bc-4fc7-a225-3247ed767812" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09ed349a-4cb6-4a09-b4cb-2d8063afd619", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f34789e4-9900-46f5-9c2a-7affaaf53505", "target_ref": "indicator--a606b947-19d3-4318-8ffc-cca522158282" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6bab9008-3b69-4736-8f47-e9a83be103de", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--f34789e4-9900-46f5-9c2a-7affaaf53505", "target_ref": "indicator--5fa28b86-9008-4985-95f0-9734bfced728" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6bc77bb0-fdcc-499b-8927-ed9f826236a3", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--e51475c5-d5bc-4fc7-a225-3247ed767812", "target_ref": "indicator--f34789e4-9900-46f5-9c2a-7affaaf53505" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e7e5c151-0eb0-48b5-b112-1fb8e30dd76a", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--e51475c5-d5bc-4fc7-a225-3247ed767812", "target_ref": "indicator--a606b947-19d3-4318-8ffc-cca522158282" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1f5e37e7-1a9f-42a7-83ef-c61bb04bc818", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--e51475c5-d5bc-4fc7-a225-3247ed767812", "target_ref": "indicator--5fa28b86-9008-4985-95f0-9734bfced728" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e3d51d99-6931-4458-bb7e-211245772bc3", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--a606b947-19d3-4318-8ffc-cca522158282", "target_ref": "indicator--f34789e4-9900-46f5-9c2a-7affaaf53505" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--748cd2d2-1457-456f-bc0e-c17a4203f19a", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--a606b947-19d3-4318-8ffc-cca522158282", "target_ref": "indicator--e51475c5-d5bc-4fc7-a225-3247ed767812" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8185c5f3-b92e-4f9a-a094-33b02b40b821", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--a606b947-19d3-4318-8ffc-cca522158282", "target_ref": "indicator--5fa28b86-9008-4985-95f0-9734bfced728" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bf4f173c-3fe1-411e-85de-f58f0017e5d3", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5fa28b86-9008-4985-95f0-9734bfced728", "target_ref": "indicator--f34789e4-9900-46f5-9c2a-7affaaf53505" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0c6581ab-780b-4d9a-aa28-436729da54cb", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5fa28b86-9008-4985-95f0-9734bfced728", "target_ref": "indicator--e51475c5-d5bc-4fc7-a225-3247ed767812" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e61aac6-9480-4dcb-8e5e-0c3d4f932d9c", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5fa28b86-9008-4985-95f0-9734bfced728", "target_ref": "indicator--a606b947-19d3-4318-8ffc-cca522158282" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c072c44-1362-46c8-9df4-b97739e0b161", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6ffbdf2e-9a6b-40a4-9a5e-7535c921f345", "target_ref": "indicator--8cd0b069-db65-448e-9b60-db167106e671" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0b5d782e-12a0-4775-b4b2-8d13afbb75f1", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6ffbdf2e-9a6b-40a4-9a5e-7535c921f345", "target_ref": "indicator--006dccd8-6cfa-4b29-a59b-21c5c300a39f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f08f0d91-d0d4-4221-997e-d12dcc2c5bc8", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--6ffbdf2e-9a6b-40a4-9a5e-7535c921f345", "target_ref": "indicator--278e1001-80c1-4708-b0a2-64ce3000c5b8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a9447af2-c8ea-4034-bf4d-7bb625394258", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--8cd0b069-db65-448e-9b60-db167106e671", "target_ref": "indicator--6ffbdf2e-9a6b-40a4-9a5e-7535c921f345" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fd07d6fd-b95e-4029-91dd-74fea6075261", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--8cd0b069-db65-448e-9b60-db167106e671", "target_ref": "indicator--006dccd8-6cfa-4b29-a59b-21c5c300a39f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3d755e2f-2426-4ace-b74d-869d32fd5fc7", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--8cd0b069-db65-448e-9b60-db167106e671", "target_ref": "indicator--278e1001-80c1-4708-b0a2-64ce3000c5b8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7b0bf445-128c-4c52-8145-97c1f0b84915", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--006dccd8-6cfa-4b29-a59b-21c5c300a39f", "target_ref": "indicator--6ffbdf2e-9a6b-40a4-9a5e-7535c921f345" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9200b9c1-a51b-4513-92c4-aafb1d849b97", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--006dccd8-6cfa-4b29-a59b-21c5c300a39f", "target_ref": "indicator--8cd0b069-db65-448e-9b60-db167106e671" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b8674710-5c4f-4360-8a40-60081dea8950", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--006dccd8-6cfa-4b29-a59b-21c5c300a39f", "target_ref": "indicator--278e1001-80c1-4708-b0a2-64ce3000c5b8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ea2714af-b73d-4806-a49d-563e1da70c04", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--278e1001-80c1-4708-b0a2-64ce3000c5b8", "target_ref": "indicator--6ffbdf2e-9a6b-40a4-9a5e-7535c921f345" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--63d6c26e-b113-4308-a6af-bb57deee9083", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--278e1001-80c1-4708-b0a2-64ce3000c5b8", "target_ref": "indicator--8cd0b069-db65-448e-9b60-db167106e671" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89141a6b-62ee-4534-94fc-087d42089d31", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--278e1001-80c1-4708-b0a2-64ce3000c5b8", "target_ref": "indicator--006dccd8-6cfa-4b29-a59b-21c5c300a39f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--569b22dd-7ae8-45e6-abc8-7e225e5c5547", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--951ef5d4-688c-4fd3-8023-43d669b320c3", "target_ref": "indicator--7bc55a37-d1f6-4560-89ef-0cdfc671190d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2c4ad371-3c3f-49cb-9239-975fac674d7b", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--951ef5d4-688c-4fd3-8023-43d669b320c3", "target_ref": "indicator--5e73c071-3445-4e5a-8ab9-35e81b468933" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ddd7b34e-30c4-47b3-860a-6a0be5d8d04f", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--951ef5d4-688c-4fd3-8023-43d669b320c3", "target_ref": "indicator--0a87e865-f342-4a6b-8ddc-33e6a06bc179" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3355a0a7-54c1-4ea8-b676-3756441aa878", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--7bc55a37-d1f6-4560-89ef-0cdfc671190d", "target_ref": "indicator--951ef5d4-688c-4fd3-8023-43d669b320c3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee64a162-ec2c-488a-ab27-ba94d3a6306b", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--7bc55a37-d1f6-4560-89ef-0cdfc671190d", "target_ref": "indicator--5e73c071-3445-4e5a-8ab9-35e81b468933" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f0e966a2-dbf3-410f-ba23-212a0649d916", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--7bc55a37-d1f6-4560-89ef-0cdfc671190d", "target_ref": "indicator--0a87e865-f342-4a6b-8ddc-33e6a06bc179" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b765a188-e353-4f5b-9ee9-4eac561a157a", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5e73c071-3445-4e5a-8ab9-35e81b468933", "target_ref": "indicator--951ef5d4-688c-4fd3-8023-43d669b320c3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a23d9919-68e5-4aef-99e1-400702870469", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5e73c071-3445-4e5a-8ab9-35e81b468933", "target_ref": "indicator--7bc55a37-d1f6-4560-89ef-0cdfc671190d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--67b1179c-d191-4646-87f6-7130938fe8c1", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--5e73c071-3445-4e5a-8ab9-35e81b468933", "target_ref": "indicator--0a87e865-f342-4a6b-8ddc-33e6a06bc179" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--139ced96-7e72-4697-b885-920fba203d37", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--0a87e865-f342-4a6b-8ddc-33e6a06bc179", "target_ref": "indicator--951ef5d4-688c-4fd3-8023-43d669b320c3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9501cff8-bce4-46ec-96b4-36baa8a3bf86", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--0a87e865-f342-4a6b-8ddc-33e6a06bc179", "target_ref": "indicator--7bc55a37-d1f6-4560-89ef-0cdfc671190d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--705ac326-21f1-4168-9390-9f37d24b7fd1", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--0a87e865-f342-4a6b-8ddc-33e6a06bc179", "target_ref": "indicator--5e73c071-3445-4e5a-8ab9-35e81b468933" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20146565-e282-4843-8cc6-b2b2a5bfc338", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fb7d69ea-12bc-4617-bf10-98e85b14e5b2", "target_ref": "indicator--d19bf318-6395-456d-a063-07c23752f137" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--811357b6-f1bb-4473-8a63-695d1c34f7ea", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--fb7d69ea-12bc-4617-bf10-98e85b14e5b2", "target_ref": "indicator--50a4ea37-dbde-4f08-81a4-366f3f2ff9b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--461e6af4-dee5-46ba-ba0e-e45ab235c488", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--d19bf318-6395-456d-a063-07c23752f137", "target_ref": "indicator--fb7d69ea-12bc-4617-bf10-98e85b14e5b2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ea0f3f2-a9f8-4dde-b8db-b8cf4452bada", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--d19bf318-6395-456d-a063-07c23752f137", "target_ref": "indicator--50a4ea37-dbde-4f08-81a4-366f3f2ff9b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e7a5230e-73b6-4f9a-acad-7d02516be215", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--50a4ea37-dbde-4f08-81a4-366f3f2ff9b4", "target_ref": "indicator--fb7d69ea-12bc-4617-bf10-98e85b14e5b2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--29dcff45-c87e-4c47-8d61-1827bc9930ee", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--50a4ea37-dbde-4f08-81a4-366f3f2ff9b4", "target_ref": "indicator--d19bf318-6395-456d-a063-07c23752f137" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--63ce2df1-e113-445f-bf1f-93b77c1b10c6", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--4a14ab2d-4da0-4cd5-adb4-e2444d8720d1", "target_ref": "indicator--a4097930-94e1-4273-aaca-b9d9bbebd8ac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de6267a8-4c97-4ea2-9918-7a228cbb90ff", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--4a14ab2d-4da0-4cd5-adb4-e2444d8720d1", "target_ref": "indicator--c03d33e4-2742-432c-9463-94bbc39d6208" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ddd0f2d1-b166-4ded-8b60-2c32efface4f", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--4a14ab2d-4da0-4cd5-adb4-e2444d8720d1", "target_ref": "indicator--b1e987ce-94af-4a20-aa4f-122ff9ca0035" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1f90a234-4389-4d17-a2d3-1dd7dd3e5508", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--a4097930-94e1-4273-aaca-b9d9bbebd8ac", "target_ref": "indicator--4a14ab2d-4da0-4cd5-adb4-e2444d8720d1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c3d7d1d-5d76-4fa2-8084-2c0933d059a9", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--a4097930-94e1-4273-aaca-b9d9bbebd8ac", "target_ref": "indicator--c03d33e4-2742-432c-9463-94bbc39d6208" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4be6031e-12cd-4ace-b567-4706a12fb5ee", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--a4097930-94e1-4273-aaca-b9d9bbebd8ac", "target_ref": "indicator--b1e987ce-94af-4a20-aa4f-122ff9ca0035" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--19caa093-4893-457a-a031-6dcc8665a765", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--c03d33e4-2742-432c-9463-94bbc39d6208", "target_ref": "indicator--4a14ab2d-4da0-4cd5-adb4-e2444d8720d1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08722d37-ecaa-4590-babb-0f7b5ccfd6a0", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--c03d33e4-2742-432c-9463-94bbc39d6208", "target_ref": "indicator--a4097930-94e1-4273-aaca-b9d9bbebd8ac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bd6ac375-eb9d-47ba-bc43-03cabb47a274", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--c03d33e4-2742-432c-9463-94bbc39d6208", "target_ref": "indicator--b1e987ce-94af-4a20-aa4f-122ff9ca0035" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--004aa869-598e-4768-b677-653f75d853b6", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--b1e987ce-94af-4a20-aa4f-122ff9ca0035", "target_ref": "indicator--4a14ab2d-4da0-4cd5-adb4-e2444d8720d1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c7236bcc-da49-487d-9ea6-f549f1f6d774", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--b1e987ce-94af-4a20-aa4f-122ff9ca0035", "target_ref": "indicator--a4097930-94e1-4273-aaca-b9d9bbebd8ac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bcf5e5aa-8519-4b9a-9451-06293fbfc480", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "related-to", "source_ref": "indicator--b1e987ce-94af-4a20-aa4f-122ff9ca0035", "target_ref": "indicator--c03d33e4-2742-432c-9463-94bbc39d6208" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2c569091-1aad-408c-8200-56db1a4e2473", "created": "2021-09-03T15:25:42.334Z", "modified": "2021-09-03T15:25:42.334Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'Investigating China\\'s Crimes against Humanity.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.334Z", "name": "SpecCom sample (Filename: Investigating China's Crimes against Humanity.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--218193b6-9cea-4c70-a3f1-3ab694f7a3cb", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--2c569091-1aad-408c-8200-56db1a4e2473", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--91d85877-8065-4a11-81d5-e4f1bc9db385", "created": "2021-09-03T15:25:42.334Z", "modified": "2021-09-03T15:25:42.334Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '3ecfc67294923acdf6bd018a73f6c590']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.334Z", "name": "SpecCom sample (MD5: 3ecfc67294923acdf6bd018a73f6c590)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de4b9eff-d02b-4cde-b880-1590e9b15583", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--91d85877-8065-4a11-81d5-e4f1bc9db385", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--22a405d6-4699-4af8-bcaf-79fcba6bea55", "created": "2021-09-03T15:25:42.334Z", "modified": "2021-09-03T15:25:42.334Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '3557d162828baab78f2a7af36651a3f46d16c1cb']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.334Z", "name": "SpecCom sample (SHA-1: 3557d162828baab78f2a7af36651a3f46d16c1cb)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2b21f64-a5b9-41b7-8181-74ce0a9c1e46", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--22a405d6-4699-4af8-bcaf-79fcba6bea55", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--81e370e0-c1ca-4c2e-891f-900fe254996d", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '489fca69a622195328302e64e29b6183feac90826dce198432d603202ca4d216']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.335Z", "name": "SpecCom sample (SHA-256: 489fca69a622195328302e64e29b6183feac90826dce198432d603202ca4d216)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee5d03cd-ebf8-4aad-a14c-80f6fedec5d4", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--81e370e0-c1ca-4c2e-891f-900fe254996d", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f2d21f4d-1f63-4a9b-a5fb-2bb19bf8d106", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '43b50568062659828966944e3ed238ff']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.335Z", "name": "SpecCom sample (MD5: 43b50568062659828966944e3ed238ff)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0793e223-8e3d-472b-829d-83faf02aca0b", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--f2d21f4d-1f63-4a9b-a5fb-2bb19bf8d106", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--303468cf-ec83-4297-8934-0f7c1a7cddae", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '011a8571830e5423847f199a09bd4cb4f039c230']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.335Z", "name": "SpecCom sample (SHA-1: 011a8571830e5423847f199a09bd4cb4f039c230)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d853b701-48e1-46f7-a1f0-b3ef04592c3b", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--303468cf-ec83-4297-8934-0f7c1a7cddae", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--daf9dfe5-42e1-455c-9782-b4ae201d064a", "created": "2021-09-03T15:25:42.335Z", "modified": "2021-09-03T15:25:42.335Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '7c25a5a88bfcc0ea7af287921860c6ab6b88b90042738650386c334bdef5b62b']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.335Z", "name": "SpecCom sample (SHA-256: 7c25a5a88bfcc0ea7af287921860c6ab6b88b90042738650386c334bdef5b62b)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3ce2876a-23e5-42af-a8d4-ad48f194cdce", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--daf9dfe5-42e1-455c-9782-b4ae201d064a", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--54ceb17b-2713-4015-84c1-c5aefb62aa0c", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '5e83008e9fbedb4d675ff9e60c80d8f9']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.336Z", "name": "SpecCom sample (MD5: 5e83008e9fbedb4d675ff9e60c80d8f9)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--38ff0d8b-af33-472d-b5a8-7a54dd6c382b", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--54ceb17b-2713-4015-84c1-c5aefb62aa0c", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f7ca8982-e058-4bdd-abc3-e1ace5944d0e", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = 'f8d549c1b778f0759eddc3eb3d30437e425d9b25']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.336Z", "name": "SpecCom sample (SHA-1: f8d549c1b778f0759eddc3eb3d30437e425d9b25)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5579c7e5-7161-4acd-a7f8-62d31d0ae46a", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--f7ca8982-e058-4bdd-abc3-e1ace5944d0e", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b859d1e3-7e2d-4c54-b8e7-36428190a238", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '0cba1f9fc63bb139d27a99839da8ddad83a40dfd7de8b01a4f6cb516527082d4']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.336Z", "name": "SpecCom sample (SHA-256: 0cba1f9fc63bb139d27a99839da8ddad83a40dfd7de8b01a4f6cb516527082d4)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb8d53e3-0ab0-4dc4-a0a9-0ae780b23dbb", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--b859d1e3-7e2d-4c54-b8e7-36428190a238", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7fe31ba6-462c-4e6e-afc6-61aa595d22a5", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '5a8783783472be67c09926cc139d5b27']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.336Z", "name": "SpecCom sample (MD5: 5a8783783472be67c09926cc139d5b27)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8cbc1bc-02b0-4e7b-93b7-2456a400aaff", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--7fe31ba6-462c-4e6e-afc6-61aa595d22a5", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--337e2e7c-f259-426e-abe4-3ec2960385dd", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '4ea195fd2af0a4fa0ce2a9b052ca380206ad6fe6']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.336Z", "name": "SpecCom sample (SHA-1: 4ea195fd2af0a4fa0ce2a9b052ca380206ad6fe6)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6d06c10-28b9-4b73-9f81-927b366f59e3", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--337e2e7c-f259-426e-abe4-3ec2960385dd", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3bdc2323-dc7e-472e-864a-730d97035264", "created": "2021-09-03T15:25:42.336Z", "modified": "2021-09-03T15:25:42.336Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '15633871c3630a559dd4e2c7a9b93b02d17dd64ee60a2d7ba340ebd14d13ffac']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.336Z", "name": "SpecCom sample (SHA-256: 15633871c3630a559dd4e2c7a9b93b02d17dd64ee60a2d7ba340ebd14d13ffac)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a7b4b762-9dd2-4d97-afa6-6019c9faf905", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--3bdc2323-dc7e-472e-864a-730d97035264", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9d69c06a-0d35-4dd5-9d91-5ffe2d1bae65", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = 'a776bfd7769d8a2fd278bba26066a2c2']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.337Z", "name": "SpecCom sample (MD5: a776bfd7769d8a2fd278bba26066a2c2)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0b4ad356-b4b4-407f-aded-668df3b68d7d", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--9d69c06a-0d35-4dd5-9d91-5ffe2d1bae65", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5bb109f9-1208-420b-b23f-988b3d8e7d9d", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '3fe27e8c4ee748b960356e0684246e19e2857db1']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.337Z", "name": "SpecCom sample (SHA-1: 3fe27e8c4ee748b960356e0684246e19e2857db1)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--568650d1-dc48-439f-8a51-dc043a126226", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--5bb109f9-1208-420b-b23f-988b3d8e7d9d", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7c6c82b8-d50e-4275-8d40-7231e7388385", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '1c00fd8202a6822257fe34e481c434af58ad0e3e731005a7fec994463c0117a9']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.337Z", "name": "SpecCom sample (SHA-256: 1c00fd8202a6822257fe34e481c434af58ad0e3e731005a7fec994463c0117a9)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f435e9a9-c56f-4e3c-a3fb-65c0a1c42dac", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--7c6c82b8-d50e-4275-8d40-7231e7388385", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--661e198a-dfc1-4915-90d2-d7cc4722b92f", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = 'a563399a8e9c4ff2f64fb6a9d77f2e4d']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.337Z", "name": "SpecCom sample (MD5: a563399a8e9c4ff2f64fb6a9d77f2e4d)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0dcc86cc-1aad-4449-9cbb-1bb971a3fa23", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--661e198a-dfc1-4915-90d2-d7cc4722b92f", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9d5aad6f-3625-4fc4-9d9e-7d0c6e59a0f7", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '1fc237ea0ad77f77318c4f0e2c434c812fb6de3c']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.337Z", "name": "SpecCom sample (SHA-1: 1fc237ea0ad77f77318c4f0e2c434c812fb6de3c)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--38e40101-552b-4e1c-98a6-65d83283772e", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--9d5aad6f-3625-4fc4-9d9e-7d0c6e59a0f7", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3f00a455-93e3-4a5a-96d1-cf326c0d15aa", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = 'b66104b4eb7d9cb169707289a1a0deac7ad8e262799b42d142bb5c009dcba4b5']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.337Z", "name": "SpecCom sample (SHA-256: b66104b4eb7d9cb169707289a1a0deac7ad8e262799b42d142bb5c009dcba4b5)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--94ae6cef-5125-46ae-9b62-109a759b9409", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--3f00a455-93e3-4a5a-96d1-cf326c0d15aa", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--20c74caf-0094-410e-a6a2-e5a5a53bc1f3", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'wsvrc.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.337Z", "name": "SpecCom sample (Filename: wsvrc.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9a5d037-197c-421f-9fb0-51bb4a0c2911", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--20c74caf-0094-410e-a6a2-e5a5a53bc1f3", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6c731b78-d08a-4da5-8d82-837035a4f9f5", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '5a91ccabd2b12ac56ba5170cf9ff8343']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.337Z", "name": "SpecCom sample (MD5: 5a91ccabd2b12ac56ba5170cf9ff8343)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7feeab4d-3938-4211-9f23-dc1cc1817d28", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6c731b78-d08a-4da5-8d82-837035a4f9f5", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1b23b0f1-f289-4e4e-9d1a-a893400cc0da", "created": "2021-09-03T15:25:42.337Z", "modified": "2021-09-03T15:25:42.337Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '24ffb24a73e68e6f5c23ab090f9ce5ac5dd41a8e']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.337Z", "name": "SpecCom sample (SHA-1: 24ffb24a73e68e6f5c23ab090f9ce5ac5dd41a8e)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97330ebb-bac0-4e0a-8bed-fc3c0ef4b559", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--1b23b0f1-f289-4e4e-9d1a-a893400cc0da", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fd319899-a1e1-4d82-9ec4-624c34f81db2", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '78e7c41458e1ddf336f0d2e9625abbdc0b3e86db18aee7377af5711bc927da35']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.338Z", "name": "SpecCom sample (SHA-256: 78e7c41458e1ddf336f0d2e9625abbdc0b3e86db18aee7377af5711bc927da35)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8a7f2184-f8f6-42a5-b0b2-201e30065992", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--fd319899-a1e1-4d82-9ec4-624c34f81db2", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fca6bfba-3b9a-4bc8-b8c9-a573a2987aa3", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'wsvrc.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.338Z", "name": "SpecCom sample (Filename: wsvrc.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c44633c9-ef13-4c8a-84ac-f257feca1a46", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--fca6bfba-3b9a-4bc8-b8c9-a573a2987aa3", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2f5504f2-a62b-469a-8850-29ac9b831f78", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = 'b4d0323f7009ff471b9741210b39ae2b']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.338Z", "name": "SpecCom sample (MD5: b4d0323f7009ff471b9741210b39ae2b)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e8da287-4f1e-4d33-b7b3-90239e542ad7", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--2f5504f2-a62b-469a-8850-29ac9b831f78", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e3faf8e8-84be-4904-9f78-43a0577807da", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '14196eda327da4cb26bf39c2bc11dc131ba6d754']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.338Z", "name": "SpecCom sample (SHA-1: 14196eda327da4cb26bf39c2bc11dc131ba6d754)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ff3cb2d9-62a5-4409-9d18-7e98e7d08d6e", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--e3faf8e8-84be-4904-9f78-43a0577807da", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--12abfb3c-89d8-4751-bc8c-4fe10c376dd7", "created": "2021-09-03T15:25:42.338Z", "modified": "2021-09-03T15:25:42.338Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '3355174b6cd213792be46ed805810acf466d32485a932804331a0dfb219048ea']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.338Z", "name": "SpecCom sample (SHA-256: 3355174b6cd213792be46ed805810acf466d32485a932804331a0dfb219048ea)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cadde65f-0ef7-4f1d-9d63-29f53a57ff0f", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--12abfb3c-89d8-4751-bc8c-4fe10c376dd7", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b01bf8e2-af1f-40a3-a91d-7405aeac0fe9", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'wsvrc.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.339Z", "name": "SpecCom sample (Filename: wsvrc.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2ce2fc2-51c0-4fb3-bdfd-90bc697daefe", "created": "2021-09-03T15:25:42.355Z", "modified": "2021-09-03T15:25:42.355Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--b01bf8e2-af1f-40a3-a91d-7405aeac0fe9", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dd67eb53-f9af-4931-904e-7fa9f32f957c", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '99813cee850313ff4774803bac9cff35']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.339Z", "name": "SpecCom sample (MD5: 99813cee850313ff4774803bac9cff35)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e01955a-cf84-4989-96a5-a99f1bf47f67", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--dd67eb53-f9af-4931-904e-7fa9f32f957c", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8c405500-14a9-4a16-98b4-3663bf7b2b1c", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '63b917b8fd93dec9dac5ab5261d4c6818fb0cb19']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.339Z", "name": "SpecCom sample (SHA-1: 63b917b8fd93dec9dac5ab5261d4c6818fb0cb19)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7aee2208-e38b-4797-a86a-e66b1efe0744", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--8c405500-14a9-4a16-98b4-3663bf7b2b1c", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1e9a0ecc-2d71-4f93-b971-18af95ff2e9d", "created": "2021-09-03T15:25:42.339Z", "modified": "2021-09-03T15:25:42.339Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '37c38a857c4a30abb559b0aec5fce7aa54117f7ecddde437fa988dd3527fd6d0']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.339Z", "name": "SpecCom sample (SHA-256: 37c38a857c4a30abb559b0aec5fce7aa54117f7ecddde437fa988dd3527fd6d0)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--26e96344-0f0b-498f-b6c7-d1ddbb685ef9", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--1e9a0ecc-2d71-4f93-b971-18af95ff2e9d", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--745bf2b7-8c3d-4f81-b685-9476cde9a9e2", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = 'b62c2c52f9cfe057660ce5ce593eb6e1']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.340Z", "name": "SpecCom sample (MD5: b62c2c52f9cfe057660ce5ce593eb6e1)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--db5c988b-3e11-4a3e-8739-c26e942e63cb", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--745bf2b7-8c3d-4f81-b685-9476cde9a9e2", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2c479d4a-7d3c-4216-8637-ea18bfd7acca", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '3a865e3017ef072726712aacb854093b6eac55ee']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.340Z", "name": "SpecCom sample (SHA-1: 3a865e3017ef072726712aacb854093b6eac55ee)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7df845d0-8195-44d0-8675-5b14085c88d0", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--2c479d4a-7d3c-4216-8637-ea18bfd7acca", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b69e2980-9cb6-42e4-b761-ccf9a72743c9", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '14c9c48614e0e105e53014cdfdade738671579a226f7a1345d15662211b45a35']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.340Z", "name": "SpecCom sample (SHA-256: 14c9c48614e0e105e53014cdfdade738671579a226f7a1345d15662211b45a35)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3dc774d-7091-4863-9af7-7cb85c891a40", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--b69e2980-9cb6-42e4-b761-ccf9a72743c9", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9963d2db-63d5-4be4-98a6-80cf9eab6e93", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'ksfgw.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.340Z", "name": "SpecCom sample (Filename: ksfgw.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--183fdfeb-56df-4c36-b5ee-8bb7d374880b", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--9963d2db-63d5-4be4-98a6-80cf9eab6e93", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a6bef973-0eb2-42b9-aeb7-9dadf04c5cbd", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '355c1de5b86201f9917ff3e583dce2b6']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.340Z", "name": "SpecCom sample (MD5: 355c1de5b86201f9917ff3e583dce2b6)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ebc0f0c0-03ef-45c2-be10-5ec45d2cc1ff", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--a6bef973-0eb2-42b9-aeb7-9dadf04c5cbd", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b38b5856-89d0-40d2-a738-c4c10bc743ba", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = 'b1657e023259ec9369f92978025f589069eee354']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.340Z", "name": "SpecCom sample (SHA-1: b1657e023259ec9369f92978025f589069eee354)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a46cc32f-1a96-4e5d-b79b-177a564e4716", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--b38b5856-89d0-40d2-a738-c4c10bc743ba", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--289fa967-5299-49d2-bfea-d0f87686b94a", "created": "2021-09-03T15:25:42.340Z", "modified": "2021-09-03T15:25:42.340Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '3c30a2075d7ca9b825d81167b79d45ce27a1bf07a0052412359afcdc73fdf51c']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.340Z", "name": "SpecCom sample (SHA-256: 3c30a2075d7ca9b825d81167b79d45ce27a1bf07a0052412359afcdc73fdf51c)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8507e7f4-30da-494b-a2d6-9fb362aea008", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--289fa967-5299-49d2-bfea-d0f87686b94a", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cc454800-1716-4e0f-9c70-a88c16bbcaac", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'mmswp.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.341Z", "name": "SpecCom sample (Filename: mmswp.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0bb0c594-8369-4584-b162-32bc02046a9d", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--cc454800-1716-4e0f-9c70-a88c16bbcaac", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--775698f0-823f-4097-ab3f-e5f5bb2a2dad", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '16e61624827d7785740b17c771a052e6']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.341Z", "name": "SpecCom sample (MD5: 16e61624827d7785740b17c771a052e6)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f41be338-b667-4cce-9f96-df910ae41d8d", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--775698f0-823f-4097-ab3f-e5f5bb2a2dad", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6a7777fc-fcf1-42a8-bb3d-0d5b5bae5bee", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '3fa8f0de425317407a540c359dfcb5e87fc02abf']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.341Z", "name": "SpecCom sample (SHA-1: 3fa8f0de425317407a540c359dfcb5e87fc02abf)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--17b3600b-1940-4692-91e8-a56924f5b524", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6a7777fc-fcf1-42a8-bb3d-0d5b5bae5bee", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4e41c7f0-1e95-4377-8af4-1194adf149df", "created": "2021-09-03T15:25:42.341Z", "modified": "2021-09-03T15:25:42.341Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = 'fc3cdc3932d69c05c735040245f94fafe22b79cd865bb7d23c4364a3f4e8c774']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.341Z", "name": "SpecCom sample (SHA-256: fc3cdc3932d69c05c735040245f94fafe22b79cd865bb7d23c4364a3f4e8c774)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--180b0bad-7c5c-4f05-be1f-c5f092fb25e8", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--4e41c7f0-1e95-4377-8af4-1194adf149df", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6525da31-9ed9-452e-8a04-c6ec637193d1", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'Puppet.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.342Z", "name": "SpecCom sample (Filename: Puppet.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee6c0f7e-470c-4f62-90d7-ccb06f95bba7", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6525da31-9ed9-452e-8a04-c6ec637193d1", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9e976387-d505-4a49-be59-ed61ef6b2b35", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '85ea346e74c120c83db7a89531f9d9a1']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.342Z", "name": "SpecCom sample (MD5: 85ea346e74c120c83db7a89531f9d9a1)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba3cc42d-c2db-4ccd-83fb-220c8fd74284", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--9e976387-d505-4a49-be59-ed61ef6b2b35", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3efee39a-b44f-4b5b-a0b7-81bc315c59eb", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = 'df8201f67beb99d7c6094e9d67f3a54c94809dda']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.342Z", "name": "SpecCom sample (SHA-1: df8201f67beb99d7c6094e9d67f3a54c94809dda)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--17f23c9c-a179-4b03-82e4-3049cba2417d", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--3efee39a-b44f-4b5b-a0b7-81bc315c59eb", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fb71a02f-95fb-414e-adee-c9020dcad5d2", "created": "2021-09-03T15:25:42.342Z", "modified": "2021-09-03T15:25:42.342Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '42e781f5e9c00d09cb5f7697a7b2fc9b04d77cc7978dcca8098f77d57693ca6c']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.342Z", "name": "SpecCom sample (SHA-256: 42e781f5e9c00d09cb5f7697a7b2fc9b04d77cc7978dcca8098f77d57693ca6c)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--65a41a15-a28e-4112-9514-115320ba4899", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--fb71a02f-95fb-414e-adee-c9020dcad5d2", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c0951c81-2124-49b9-af1f-be31748abd7f", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = 'ccc7f88b72c286fd756e76309022e9f8']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.343Z", "name": "SpecCom sample (MD5: ccc7f88b72c286fd756e76309022e9f8)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d5b28fa-451f-45e6-bbbc-08b6e079f620", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--c0951c81-2124-49b9-af1f-be31748abd7f", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--627af53b-68be-412b-8168-7ecf0469ccd4", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '4f2ba5c8848ec94835f4070acb92dcad46769995']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.343Z", "name": "SpecCom sample (SHA-1: 4f2ba5c8848ec94835f4070acb92dcad46769995)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b4aefa59-23a6-4ded-9729-fc7ae86bb7a6", "created": "2021-09-03T15:25:42.356Z", "modified": "2021-09-03T15:25:42.356Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--627af53b-68be-412b-8168-7ecf0469ccd4", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8ebce1f6-0445-4807-858e-3d52dc0541c1", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = 'e683c86fd40eac23bc6435f479518ea5d80f90da294d5ad21d024dd7acc8a6ac']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.343Z", "name": "SpecCom sample (SHA-256: e683c86fd40eac23bc6435f479518ea5d80f90da294d5ad21d024dd7acc8a6ac)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--654e5e50-2d7d-4095-aad3-fd478864e809", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--8ebce1f6-0445-4807-858e-3d52dc0541c1", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--42352416-115b-4d76-af2c-b4898bfb5611", "created": "2021-09-03T15:25:42.343Z", "modified": "2021-09-03T15:25:42.343Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = 'd2890aded5aa4e540317a34ae01407cd']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.343Z", "name": "SpecCom sample (MD5: d2890aded5aa4e540317a34ae01407cd)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d97e18f3-3e57-4437-852f-0ede1e94cd86", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--42352416-115b-4d76-af2c-b4898bfb5611", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f1804e4b-4fc8-4e95-bbf3-cb990d607071", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '5bfe3beeb21cd6018646b9715bc836d1a38ad583']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.344Z", "name": "SpecCom sample (SHA-1: 5bfe3beeb21cd6018646b9715bc836d1a38ad583)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8774aca0-3731-4eed-ae9e-433df12695ff", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--f1804e4b-4fc8-4e95-bbf3-cb990d607071", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5170e2e6-833d-4fce-a434-15eb3a5e0867", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = 'e7a5205bd0d941a7b6c88d31f3b958c890a4f09a49ec8a3a45f4bedaf194afeb']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.344Z", "name": "SpecCom sample (SHA-256: e7a5205bd0d941a7b6c88d31f3b958c890a4f09a49ec8a3a45f4bedaf194afeb)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7167f820-a2db-42c2-8a19-5212d0d264d0", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--5170e2e6-833d-4fce-a434-15eb3a5e0867", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--16a2b295-564d-4f6c-8815-d5ca336bca90", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'акт IDMSUZ_3.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.344Z", "name": "SpecCom sample (Filename: акт IDMSUZ_3.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba185bbb-aeeb-49b1-84a9-e3229b113ef8", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--16a2b295-564d-4f6c-8815-d5ca336bca90", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7db30756-5877-4df5-9e28-a350f23a98f4", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '35caae29c47dfb570773f6d5fd37e625']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.344Z", "name": "SpecCom sample (MD5: 35caae29c47dfb570773f6d5fd37e625)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--93bb50c9-0035-4d76-95bb-bd3232994060", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--7db30756-5877-4df5-9e28-a350f23a98f4", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d489006c-fbf6-4870-a562-f7a902dcaab9", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '6519a71c64aa216673f3582da1338e22c4ad78a8']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.344Z", "name": "SpecCom sample (SHA-1: 6519a71c64aa216673f3582da1338e22c4ad78a8)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6b77b3a4-3770-4f8e-a4ce-5cf2453e699b", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--d489006c-fbf6-4870-a562-f7a902dcaab9", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bde7895f-75d9-4707-a581-c338c54b7c49", "created": "2021-09-03T15:25:42.344Z", "modified": "2021-09-03T15:25:42.344Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '6395c4a8495d3bff293a8a55ca3c5ebf68a616ee212b2a7284610b0a3f7bb5d4']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.344Z", "name": "SpecCom sample (SHA-256: 6395c4a8495d3bff293a8a55ca3c5ebf68a616ee212b2a7284610b0a3f7bb5d4)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--158ac59a-1726-45ff-a318-2e662580625e", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--bde7895f-75d9-4707-a581-c338c54b7c49", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2443a0e6-3efb-4b7d-8615-19721e907871", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '3562bf97997c54d74f58d4c1ad84fcea']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.345Z", "name": "SpecCom sample (MD5: 3562bf97997c54d74f58d4c1ad84fcea)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68935e51-b295-4304-90ac-e9808ac49639", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--2443a0e6-3efb-4b7d-8615-19721e907871", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6042c3c8-11bc-4638-829d-b93c13f36a6d", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '5a08e5bce797142c6d46675a6c070e503e987dd7']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.345Z", "name": "SpecCom sample (SHA-1: 5a08e5bce797142c6d46675a6c070e503e987dd7)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9cb010cb-6097-4d48-aac8-71bcbe8a62bb", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6042c3c8-11bc-4638-829d-b93c13f36a6d", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2607073d-ade7-4e9f-9f54-419dcafab37a", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '6ffe81c2883c298a65477ba2bc7ba1063315ad6b26f0188e3361d0fa924575ae']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.345Z", "name": "SpecCom sample (SHA-256: 6ffe81c2883c298a65477ba2bc7ba1063315ad6b26f0188e3361d0fa924575ae)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--945e8797-a407-437e-9b4d-90d43f6378be", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--2607073d-ade7-4e9f-9f54-419dcafab37a", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--559f775c-ada9-4214-aa2a-bbef6aa5d4a0", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '5ea42089cf91464b9c0c42292c18ba4c']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.345Z", "name": "SpecCom sample (MD5: 5ea42089cf91464b9c0c42292c18ba4c)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ecb36543-c841-4a35-b924-f596bc17b4c1", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--559f775c-ada9-4214-aa2a-bbef6aa5d4a0", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8ae06188-93ff-4a45-be6c-38087289a816", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '88927e4d9a6a1ce5e656c599c0b0f462af97ba57']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.345Z", "name": "SpecCom sample (SHA-1: 88927e4d9a6a1ce5e656c599c0b0f462af97ba57)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bf7ae297-9dd8-4779-92f1-260f04f39c5b", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--8ae06188-93ff-4a45-be6c-38087289a816", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--679e97de-ee22-4cce-860d-3095ebc64c7b", "created": "2021-09-03T15:25:42.345Z", "modified": "2021-09-03T15:25:42.345Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '784cf7d224974f7e2c43cf10580c42a2521556608a5dd4a11247d09a77f5c8df']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.345Z", "name": "SpecCom sample (SHA-256: 784cf7d224974f7e2c43cf10580c42a2521556608a5dd4a11247d09a77f5c8df)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--250df907-f118-47df-b474-0b47629d6e54", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--679e97de-ee22-4cce-860d-3095ebc64c7b", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f55e05d8-804d-44af-8ec1-32a4a9eb31d7", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'wsvrc.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.346Z", "name": "SpecCom sample (Filename: wsvrc.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6503e4b6-bbce-4142-9b78-17ef9a6c8064", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--f55e05d8-804d-44af-8ec1-32a4a9eb31d7", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f475ad15-765d-4e90-aa5d-3042f47857a1", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '33f42e9678ee91369d11ef344bbd5a0d']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.346Z", "name": "SpecCom sample (MD5: 33f42e9678ee91369d11ef344bbd5a0d)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--37815ad6-1a77-49c2-a60c-65df5d5914fe", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--f475ad15-765d-4e90-aa5d-3042f47857a1", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ce293b5c-8816-4923-be3a-f40134a4e022", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '8b8a5ed2f2921d355d82e342595b1e73f5ed2560']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.346Z", "name": "SpecCom sample (SHA-1: 8b8a5ed2f2921d355d82e342595b1e73f5ed2560)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--04b02701-8f6a-4eb3-960c-aed054311f31", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--ce293b5c-8816-4923-be3a-f40134a4e022", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--244de742-9fc5-4784-b9c5-083133b094bb", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '52a53e7e250fa9faa823d26421ca8af42ac40c27bac1d5af65b452c8987cda72']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.346Z", "name": "SpecCom sample (SHA-256: 52a53e7e250fa9faa823d26421ca8af42ac40c27bac1d5af65b452c8987cda72)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--542ec9fc-a8a2-4960-bf90-0a18995674b9", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--244de742-9fc5-4784-b9c5-083133b094bb", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--71dd59b8-f865-4090-a489-8c64ac420b53", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = 'aa107be86814d9c86911a2a7874d38a0']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.346Z", "name": "SpecCom sample (MD5: aa107be86814d9c86911a2a7874d38a0)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8fc9dc04-ca43-430c-9871-b54deb3b9777", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--71dd59b8-f865-4090-a489-8c64ac420b53", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--764660ad-06e9-4541-83ab-b7d4b862e2b9", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '8cfd45f1364f569522399d1e246039cffbde6d82']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.346Z", "name": "SpecCom sample (SHA-1: 8cfd45f1364f569522399d1e246039cffbde6d82)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a82436bd-f8fb-4fdc-b720-2063352cefd3", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--764660ad-06e9-4541-83ab-b7d4b862e2b9", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6c797b87-276f-4a89-a12f-8b5e1a798d2a", "created": "2021-09-03T15:25:42.346Z", "modified": "2021-09-03T15:25:42.346Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '295b987c8926399c063ff20d2484477fe31cd2188b604a919dbfa11d9c34b988']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.346Z", "name": "SpecCom sample (SHA-256: 295b987c8926399c063ff20d2484477fe31cd2188b604a919dbfa11d9c34b988)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--43989c0b-ad82-4852-abe8-188521626bb5", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6c797b87-276f-4a89-a12f-8b5e1a798d2a", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fc870802-12b1-471b-8d80-03a8a9eb65d9", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'wsvrc.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.347Z", "name": "SpecCom sample (Filename: wsvrc.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6253f156-6783-4771-9123-a8f1210e9c46", "created": "2021-09-03T15:25:42.357Z", "modified": "2021-09-03T15:25:42.357Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--fc870802-12b1-471b-8d80-03a8a9eb65d9", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--71b931b2-9680-45a5-9e4d-13ab1a833e50", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = 'c485871b0837ee05697b3d2be67a7962']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.347Z", "name": "SpecCom sample (MD5: c485871b0837ee05697b3d2be67a7962)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb4be851-5497-4dc0-bf12-38832e7c5610", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--71b931b2-9680-45a5-9e4d-13ab1a833e50", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--39515c04-89fd-4cc2-9dd0-107331d90850", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '965720630d5fd6a774d821f37f3ba5c1dac34079']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.347Z", "name": "SpecCom sample (SHA-1: 965720630d5fd6a774d821f37f3ba5c1dac34079)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0ae557a8-1c85-4ae1-b5c2-5f0d3bc1b881", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--39515c04-89fd-4cc2-9dd0-107331d90850", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8178ffae-a7a3-46a7-85ab-7baf4e9dbea3", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '83bc8f011cba273c9c0dd2070cad429664ea5cdef05387edfad7e0cd6a389b66']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.347Z", "name": "SpecCom sample (SHA-256: 83bc8f011cba273c9c0dd2070cad429664ea5cdef05387edfad7e0cd6a389b66)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--71464228-0319-492e-b0e0-aead2e2e3882", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--8178ffae-a7a3-46a7-85ab-7baf4e9dbea3", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--02e50c7c-f882-4878-b777-fa7e50b9071e", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'wsvrc.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.347Z", "name": "SpecCom sample (Filename: wsvrc.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6350314b-74cc-4103-a7be-82f1368fba8a", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--02e50c7c-f882-4878-b777-fa7e50b9071e", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--be27adea-c70d-478f-bc25-513bc30bb5d0", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = 'e44a0ad175c535a1c136ea71513286f5']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.347Z", "name": "SpecCom sample (MD5: e44a0ad175c535a1c136ea71513286f5)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2437135d-722b-4db4-8ad3-9c9297b7180f", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--be27adea-c70d-478f-bc25-513bc30bb5d0", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--472c6111-5abb-4ca9-93da-9efdddbf098a", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = 'f6901a575090a83832593ff1eeb6ae08d4b85c78']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.347Z", "name": "SpecCom sample (SHA-1: f6901a575090a83832593ff1eeb6ae08d4b85c78)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b67caa36-94af-45f1-8705-6dec4adad8bb", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--472c6111-5abb-4ca9-93da-9efdddbf098a", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--db538a27-eda1-4837-b1d5-3963fb903843", "created": "2021-09-03T15:25:42.347Z", "modified": "2021-09-03T15:25:42.347Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '96fa3b2466ab06fbaf17f0d19507fb5b6614d1648d9811904a04d017b38af74a']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.347Z", "name": "SpecCom sample (SHA-256: 96fa3b2466ab06fbaf17f0d19507fb5b6614d1648d9811904a04d017b38af74a)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0b7c9de4-3864-4912-bf0b-204f46a828d8", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--db538a27-eda1-4837-b1d5-3963fb903843", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d9c23180-b74e-4fd8-bd7f-aaf6eb501a48", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'Диппаспорт.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.348Z", "name": "SpecCom sample (Filename: Диппаспорт.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6efe2158-ee4e-418a-990c-f5d0746290d0", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--d9c23180-b74e-4fd8-bd7f-aaf6eb501a48", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5334a7ac-c157-4c91-91b6-35334f9f8e83", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '06d72a4d99fcd76a3502432657f3c999']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.348Z", "name": "SpecCom sample (MD5: 06d72a4d99fcd76a3502432657f3c999)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--096f4adf-e415-4082-9cc8-0f5088da9e66", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--5334a7ac-c157-4c91-91b6-35334f9f8e83", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cebb8ff0-418a-4503-80e3-9fc926346e79", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '9976e5121c264a2b0dcf09ddd6c8cb53fdd964f8']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.348Z", "name": "SpecCom sample (SHA-1: 9976e5121c264a2b0dcf09ddd6c8cb53fdd964f8)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0d031253-eeca-4f9f-8d34-fa20e5c15c51", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--cebb8ff0-418a-4503-80e3-9fc926346e79", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--59f89497-bdba-46fe-bb86-6de9e9309b7f", "created": "2021-09-03T15:25:42.348Z", "modified": "2021-09-03T15:25:42.348Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '27312973aefcfa2511573a28ff42ef12ecbfcf56db42bf4d1371b0a1f1f2732c']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.348Z", "name": "SpecCom sample (SHA-256: 27312973aefcfa2511573a28ff42ef12ecbfcf56db42bf4d1371b0a1f1f2732c)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b072036f-d3d8-4d41-b7d1-c22cd46a0cfe", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--59f89497-bdba-46fe-bb86-6de9e9309b7f", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3c82ae4b-671e-4c8a-aa40-a21adeae929f", "created": "2021-09-03T15:25:42.349Z", "modified": "2021-09-03T15:25:42.349Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '9154e59b67166a226fcfd4bb41de8b01']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.349Z", "name": "SpecCom sample (MD5: 9154e59b67166a226fcfd4bb41de8b01)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--59a49412-6756-48dc-8503-c9811d3e1285", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--3c82ae4b-671e-4c8a-aa40-a21adeae929f", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c2926340-81f7-4a5c-8059-9f787132b3eb", "created": "2021-09-03T15:25:42.349Z", "modified": "2021-09-03T15:25:42.349Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = 'b4a26fdb25df67d5378b677f8b6fb4fb0f44589b']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.349Z", "name": "SpecCom sample (SHA-1: b4a26fdb25df67d5378b677f8b6fb4fb0f44589b)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5cfba0cc-7a14-4e88-830b-ec0c0dd253ce", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--c2926340-81f7-4a5c-8059-9f787132b3eb", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5fc0fcaf-a1df-4357-8aff-765dcf22f06c", "created": "2021-09-03T15:25:42.349Z", "modified": "2021-09-03T15:25:42.349Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = 'ff97e35aec84882611d56dc5758e7dedd4839e326e5708d6d5ae4dbd296dd62d']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.349Z", "name": "SpecCom sample (SHA-256: ff97e35aec84882611d56dc5758e7dedd4839e326e5708d6d5ae4dbd296dd62d)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ac913d7a-62e4-4985-9a1a-36391b6c1f5f", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--5fc0fcaf-a1df-4357-8aff-765dcf22f06c", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a0395017-7063-47ac-957e-80ece65b3056", "created": "2021-09-03T15:25:42.350Z", "modified": "2021-09-03T15:25:42.350Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = 'cff6d9f5d214e3366d6b4ae31c413adc']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.350Z", "name": "SpecCom sample (MD5: cff6d9f5d214e3366d6b4ae31c413adc)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca2f606c-c1f4-4500-8eb1-33d7ae61b809", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--a0395017-7063-47ac-957e-80ece65b3056", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d94bde35-6823-4364-871f-94c8786ca419", "created": "2021-09-03T15:25:42.350Z", "modified": "2021-09-03T15:25:42.350Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '6305784544936d4b1b2f7ede4028c33094ddcea2']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.350Z", "name": "SpecCom sample (SHA-1: 6305784544936d4b1b2f7ede4028c33094ddcea2)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--56ba2582-5307-4852-a418-99e521cc706b", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--d94bde35-6823-4364-871f-94c8786ca419", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--361b25ab-d920-4a6d-9246-764ca5721e35", "created": "2021-09-03T15:25:42.350Z", "modified": "2021-09-03T15:25:42.350Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = 'c0082f8f1e49c0805c4eaacf5cf5b99ae30eeea585fd77cbd50904927052a18c']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.350Z", "name": "SpecCom sample (SHA-256: c0082f8f1e49c0805c4eaacf5cf5b99ae30eeea585fd77cbd50904927052a18c)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9594b9cd-1f32-4a23-8807-240cca0272a6", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--361b25ab-d920-4a6d-9246-764ca5721e35", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--76be25aa-e90b-45aa-8661-50bb74b126e5", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '66bfde24edb848b230b0bf0589b9ed4d']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.351Z", "name": "SpecCom sample (MD5: 66bfde24edb848b230b0bf0589b9ed4d)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--57f5329f-c195-4ad2-9595-f6d76c46627f", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--76be25aa-e90b-45aa-8661-50bb74b126e5", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f779084c-d990-412b-8fa7-b337b7520ea9", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = 'c862c26c9d1d9d513efae4063f275f0502e125a9']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.351Z", "name": "SpecCom sample (SHA-1: c862c26c9d1d9d513efae4063f275f0502e125a9)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6b350989-dc92-4a6f-8cd2-8df968913092", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--f779084c-d990-412b-8fa7-b337b7520ea9", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--130b4eb2-ca05-4abf-9e7b-18e83224260a", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '9a3c2ba8ddbeffcb86e53f5193fe74747d7df2ca33ba839b1b23d04d0d5869e4']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.351Z", "name": "SpecCom sample (SHA-256: 9a3c2ba8ddbeffcb86e53f5193fe74747d7df2ca33ba839b1b23d04d0d5869e4)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e2f3d81-7bdd-4b2d-9770-5434f453f879", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--130b4eb2-ca05-4abf-9e7b-18e83224260a", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f34789e4-9900-46f5-9c2a-7affaaf53505", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'NOTEPAD.EXE']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.351Z", "name": "SpecCom sample (Filename: NOTEPAD.EXE)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bf0cc886-57fd-49f7-abf0-f81f6f9cb84f", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--f34789e4-9900-46f5-9c2a-7affaaf53505", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e51475c5-d5bc-4fc7-a225-3247ed767812", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '6dfd06f91060e421320b6ebd63c957f0']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.351Z", "name": "SpecCom sample (MD5: 6dfd06f91060e421320b6ebd63c957f0)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bce7bb2b-1c20-4e50-b812-98bb5af12025", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--e51475c5-d5bc-4fc7-a225-3247ed767812", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a606b947-19d3-4318-8ffc-cca522158282", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = '10d3f7e7376c88429d829ed084974966462ecbfc']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.351Z", "name": "SpecCom sample (SHA-1: 10d3f7e7376c88429d829ed084974966462ecbfc)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e9ac0b42-ab9e-40d4-88e3-8851404dcee5", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.358Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--a606b947-19d3-4318-8ffc-cca522158282", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5fa28b86-9008-4985-95f0-9734bfced728", "created": "2021-09-03T15:25:42.351Z", "modified": "2021-09-03T15:25:42.351Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = 'd31e440e0d6f98209a9c9c7b4e332f417e41030a4bf4a4ae99d326cec24807af']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.351Z", "name": "SpecCom sample (SHA-256: d31e440e0d6f98209a9c9c7b4e332f417e41030a4bf4a4ae99d326cec24807af)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ff94c71-0925-441d-82ae-83a0e907b4c6", "created": "2021-09-03T15:25:42.358Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--5fa28b86-9008-4985-95f0-9734bfced728", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6ffbdf2e-9a6b-40a4-9a5e-7535c921f345", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'wsvrc.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.352Z", "name": "SpecCom sample (Filename: wsvrc.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5576fb89-6ef9-4b17-b5d3-39569be183fd", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6ffbdf2e-9a6b-40a4-9a5e-7535c921f345", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8cd0b069-db65-448e-9b60-db167106e671", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '4ddf6a1e37fc46316eb7810525d4942a']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.352Z", "name": "SpecCom sample (MD5: 4ddf6a1e37fc46316eb7810525d4942a)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eed7f013-6706-444e-a1f6-d0c18a45c2fb", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--8cd0b069-db65-448e-9b60-db167106e671", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--006dccd8-6cfa-4b29-a59b-21c5c300a39f", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = 'db6939bf8b45f1902da3c82446e1dc31334e4e99']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.352Z", "name": "SpecCom sample (SHA-1: db6939bf8b45f1902da3c82446e1dc31334e4e99)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--490a5c6d-788c-4387-a841-e91d8f11c5d3", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--006dccd8-6cfa-4b29-a59b-21c5c300a39f", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--278e1001-80c1-4708-b0a2-64ce3000c5b8", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = '4229630102f0b972e9464a48fa67b4f7b1d5def8ad16b8e258523dabb7bda9a8']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.352Z", "name": "SpecCom sample (SHA-256: 4229630102f0b972e9464a48fa67b4f7b1d5def8ad16b8e258523dabb7bda9a8)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bd27c48e-f090-4062-906e-84063fb02687", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--278e1001-80c1-4708-b0a2-64ce3000c5b8", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--951ef5d4-688c-4fd3-8023-43d669b320c3", "created": "2021-09-03T15:25:42.352Z", "modified": "2021-09-03T15:25:42.352Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'материалы к массовому беспорядку.exe']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.352Z", "name": "SpecCom sample (Filename: материалы к массовому беспорядку.exe)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ae1e3cb-7840-4714-b001-f97d4a8393d9", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--951ef5d4-688c-4fd3-8023-43d669b320c3", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7bc55a37-d1f6-4560-89ef-0cdfc671190d", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = 'c00f6268075e3af85176bf0b00c66c13']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.353Z", "name": "SpecCom sample (MD5: c00f6268075e3af85176bf0b00c66c13)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--321e121d-58e6-4e7a-a882-d3277ae0b943", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--7bc55a37-d1f6-4560-89ef-0cdfc671190d", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5e73c071-3445-4e5a-8ab9-35e81b468933", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = 'a3343f4cd3eb8415d3b787ff442074180d108d3a']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.353Z", "name": "SpecCom sample (SHA-1: a3343f4cd3eb8415d3b787ff442074180d108d3a)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c11112b9-f905-4f88-85d8-a079918c1492", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--5e73c071-3445-4e5a-8ab9-35e81b468933", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0a87e865-f342-4a6b-8ddc-33e6a06bc179", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = 'e9013f35ce11fc4c5eb2c21827bdc459202d362365d6ea5b724dee4fe0088bd1']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.353Z", "name": "SpecCom sample (SHA-256: e9013f35ce11fc4c5eb2c21827bdc459202d362365d6ea5b724dee4fe0088bd1)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d4d79d2-5bb4-4693-83df-552b37d2d576", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--0a87e865-f342-4a6b-8ddc-33e6a06bc179", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fb7d69ea-12bc-4617-bf10-98e85b14e5b2", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '84575619a690d3ef1209b7e3a7e79935']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.353Z", "name": "SpecCom sample (MD5: 84575619a690d3ef1209b7e3a7e79935)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d76f13dc-c5e9-41c1-8297-3439244e9622", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--fb7d69ea-12bc-4617-bf10-98e85b14e5b2", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d19bf318-6395-456d-a063-07c23752f137", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = 'f2ee686c24eddea9ca495cfbb790798e6b6d451b']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.353Z", "name": "SpecCom sample (SHA-1: f2ee686c24eddea9ca495cfbb790798e6b6d451b)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb8e9917-71cf-4c9b-bcb0-76a0f2e616c4", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--d19bf318-6395-456d-a063-07c23752f137", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--50a4ea37-dbde-4f08-81a4-366f3f2ff9b4", "created": "2021-09-03T15:25:42.353Z", "modified": "2021-09-03T15:25:42.353Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = 'ab1983217880dad9c0481aab5b06e1fe4b9caaf8d56d8a03bf794aca18f2e4c6']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.353Z", "name": "SpecCom sample (SHA-256: ab1983217880dad9c0481aab5b06e1fe4b9caaf8d56d8a03bf794aca18f2e4c6)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--59b17839-4a75-4223-8a85-7aeea13f522e", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--50a4ea37-dbde-4f08-81a4-366f3f2ff9b4", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4a14ab2d-4da0-4cd5-adb4-e2444d8720d1", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:name = 'NOTEPAD.EXE']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.354Z", "name": "SpecCom sample (Filename: NOTEPAD.EXE)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5bd40aa0-37dc-4379-ac2f-f931d5773cff", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--4a14ab2d-4da0-4cd5-adb4-e2444d8720d1", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a4097930-94e1-4273-aaca-b9d9bbebd8ac", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'MD5' = '312fed679cbab1e42ca566f2313ed1a3']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.354Z", "name": "SpecCom sample (MD5: 312fed679cbab1e42ca566f2313ed1a3)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--022d9a3a-9efd-4887-b728-a08b8f64d099", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--a4097930-94e1-4273-aaca-b9d9bbebd8ac", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c03d33e4-2742-432c-9463-94bbc39d6208", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-1' = 'fed2d5dccb8fb0a465bcd645bf3a1f7b94a70c10']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.354Z", "name": "SpecCom sample (SHA-1: fed2d5dccb8fb0a465bcd645bf3a1f7b94a70c10)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8a2a8a39-428d-477c-9011-1defc68d33fa", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--c03d33e4-2742-432c-9463-94bbc39d6208", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b1e987ce-94af-4a20-aa4f-122ff9ca0035", "created": "2021-09-03T15:25:42.354Z", "modified": "2021-09-03T15:25:42.354Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[file:hashes.'SHA-256' = 'ff1055da48829a69709702f1b44f5af0aa9be013bdc7fdf14db9dc66180d476d']", "description": "SpecCom sample - Windows EXE (PE) x86", "valid_from": "2021-09-03T15:25:42.354Z", "name": "SpecCom sample (SHA-256: ff1055da48829a69709702f1b44f5af0aa9be013bdc7fdf14db9dc66180d476d)", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8edac08e-5c39-4a84-9952-2c979fb33100", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--b1e987ce-94af-4a20-aa4f-122ff9ca0035", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7069c59e-db71-4a0f-8829-ef4a6cef437c", "created": "2021-09-03T15:25:42.359Z", "modified": "2021-09-03T15:25:42.359Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = 'tel-com.sequoiame.com']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.359Z", "name": "Domain Name: tel-com.sequoiame.com", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--93fd3abe-6cf3-4823-a4a9-4923be0749b0", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--7069c59e-db71-4a0f-8829-ef4a6cef437c", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5746d61-e7ff-4df2-a00c-33c591c9e030", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--7069c59e-db71-4a0f-8829-ef4a6cef437c", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9ebf9841-c5a5-4c15-b036-e471cc9c34ab", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--7069c59e-db71-4a0f-8829-ef4a6cef437c", "target_ref": "indicator--f2d21f4d-1f63-4a9b-a5fb-2bb19bf8d106" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d05dc41e-0a9d-4576-998b-1900d8975776", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--7069c59e-db71-4a0f-8829-ef4a6cef437c", "target_ref": "indicator--303468cf-ec83-4297-8934-0f7c1a7cddae" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--83fdeb0f-d6f8-46b1-8a76-d97e06a99c04", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--7069c59e-db71-4a0f-8829-ef4a6cef437c", "target_ref": "indicator--daf9dfe5-42e1-455c-9782-b4ae201d064a" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a96cf6fe-589c-47e9-991d-1978150e8a33", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = 'evisa.uz.webfaction.info']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.360Z", "name": "Domain Name: evisa.uz.webfaction.info", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--76db6f4d-91e1-4fbe-9239-daf484f8e803", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--a96cf6fe-589c-47e9-991d-1978150e8a33", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--992c0bf2-9048-45d1-9e97-e07df5ce1450", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--a96cf6fe-589c-47e9-991d-1978150e8a33", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2a72507e-648b-4e49-9bdc-f8d2205793b9", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--a96cf6fe-589c-47e9-991d-1978150e8a33", "target_ref": "indicator--54ceb17b-2713-4015-84c1-c5aefb62aa0c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0df1b471-c1d8-4c15-bb25-8834efcf6f8d", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--a96cf6fe-589c-47e9-991d-1978150e8a33", "target_ref": "indicator--f7ca8982-e058-4bdd-abc3-e1ace5944d0e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--835ec258-e64e-405f-830d-b0f2a87dd6d6", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--a96cf6fe-589c-47e9-991d-1978150e8a33", "target_ref": "indicator--b859d1e3-7e2d-4c54-b8e7-36428190a238" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--14e819a2-e5ed-4aa9-bd81-2c6c4342df8c", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--a96cf6fe-589c-47e9-991d-1978150e8a33", "target_ref": "indicator--661e198a-dfc1-4915-90d2-d7cc4722b92f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--409f7300-ca74-4a84-9e8b-f4041b31fee5", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--a96cf6fe-589c-47e9-991d-1978150e8a33", "target_ref": "indicator--9d5aad6f-3625-4fc4-9d9e-7d0c6e59a0f7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9c66814-e384-4068-bb24-92f60b3e06a9", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--a96cf6fe-589c-47e9-991d-1978150e8a33", "target_ref": "indicator--3f00a455-93e3-4a5a-96d1-cf326c0d15aa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6055e13c-e235-4612-9ec6-7f627539158b", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = 'update.ictdp.com']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.360Z", "name": "Domain Name: update.ictdp.com", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d1b7c498-24f3-440c-9cf7-49ed50832c26", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6055e13c-e235-4612-9ec6-7f627539158b", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa92f87d-926d-4979-bf6a-1fc6a2795c81", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6055e13c-e235-4612-9ec6-7f627539158b", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e7dfbba6-12c6-4994-88ad-8293498db5a5", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.360Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6055e13c-e235-4612-9ec6-7f627539158b", "target_ref": "indicator--7fe31ba6-462c-4e6e-afc6-61aa595d22a5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9550c18-53e9-40cc-ba76-22c77e544f39", "created": "2021-09-03T15:25:42.360Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6055e13c-e235-4612-9ec6-7f627539158b", "target_ref": "indicator--337e2e7c-f259-426e-abe4-3ec2960385dd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d687baf8-031a-4833-a3b9-def596637e61", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6055e13c-e235-4612-9ec6-7f627539158b", "target_ref": "indicator--3bdc2323-dc7e-472e-864a-730d97035264" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c156270-be1e-4405-b6c3-851bbeb707e1", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6055e13c-e235-4612-9ec6-7f627539158b", "target_ref": "indicator--42352416-115b-4d76-af2c-b4898bfb5611" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--931eed9c-3569-4c99-bdab-718d049d718c", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6055e13c-e235-4612-9ec6-7f627539158b", "target_ref": "indicator--f1804e4b-4fc8-4e95-bbf3-cb990d607071" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--370c556e-68a1-48cb-a96e-fee2d14652ee", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6055e13c-e235-4612-9ec6-7f627539158b", "target_ref": "indicator--5170e2e6-833d-4fce-a434-15eb3a5e0867" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--db35c8f1-be1d-4e3f-836a-17c3c1f5ee84", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6055e13c-e235-4612-9ec6-7f627539158b", "target_ref": "indicator--be27adea-c70d-478f-bc25-513bc30bb5d0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc9df264-24cf-4983-b059-fb364d414063", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6055e13c-e235-4612-9ec6-7f627539158b", "target_ref": "indicator--472c6111-5abb-4ca9-93da-9efdddbf098a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3b3b170-ce3e-4e11-b123-2b9a3fbdaeaa", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6055e13c-e235-4612-9ec6-7f627539158b", "target_ref": "indicator--db538a27-eda1-4837-b1d5-3963fb903843" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6178be86-294e-4798-a311-e31434c01c77", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = 'mofa.ungov.org']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.361Z", "name": "Domain Name: mofa.ungov.org", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e53a3b25-235f-4450-b648-3be578184f57", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6178be86-294e-4798-a311-e31434c01c77", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--36d39545-f40a-42df-bd14-a24141281dba", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6178be86-294e-4798-a311-e31434c01c77", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31b4318f-717d-4c21-98d8-a35b1a750026", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6178be86-294e-4798-a311-e31434c01c77", "target_ref": "indicator--9d69c06a-0d35-4dd5-9d91-5ffe2d1bae65" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d301285-2e9b-4b06-95a4-4759aae46cbb", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6178be86-294e-4798-a311-e31434c01c77", "target_ref": "indicator--5bb109f9-1208-420b-b23f-988b3d8e7d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a546fb4-897a-4092-9a79-dd2018aac3b5", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6178be86-294e-4798-a311-e31434c01c77", "target_ref": "indicator--7c6c82b8-d50e-4275-8d40-7231e7388385" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d757889b-a320-4a1c-826b-ab0b1f2798f4", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6178be86-294e-4798-a311-e31434c01c77", "target_ref": "indicator--2f5504f2-a62b-469a-8850-29ac9b831f78" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5b70f848-326b-47d9-b14d-74aac6c47d89", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6178be86-294e-4798-a311-e31434c01c77", "target_ref": "indicator--e3faf8e8-84be-4904-9f78-43a0577807da" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--23c2036c-dbdb-49d2-a8e4-7adfc369a5c9", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6178be86-294e-4798-a311-e31434c01c77", "target_ref": "indicator--12abfb3c-89d8-4751-bc8c-4fe10c376dd7" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = 'help.2019mfa.com']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.361Z", "name": "Domain Name: help.2019mfa.com", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c5e10bd-3504-4266-8598-cf3f494f6c0e", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--471e53a9-9955-4aee-9546-90f43d6cfd63", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01c1db79-9120-4e00-b1fc-50f055d1cb85", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "indicator--6c731b78-d08a-4da5-8d82-837035a4f9f5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--693a9995-12d0-4f10-aae9-b0cb8e8fc49b", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "indicator--1b23b0f1-f289-4e4e-9d1a-a893400cc0da" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--994b675e-076c-4381-bc54-7f0b3ec6244e", "created": "2021-09-03T15:25:42.361Z", "modified": "2021-09-03T15:25:42.361Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "indicator--fd319899-a1e1-4d82-9ec4-624c34f81db2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9153553c-09a4-4bce-aa90-9f4393af87cd", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "indicator--775698f0-823f-4097-ab3f-e5f5bb2a2dad" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--62226513-8c55-4487-9ee2-b44abc736958", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "indicator--6a7777fc-fcf1-42a8-bb3d-0d5b5bae5bee" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--976c2b04-c514-46f7-9a28-1792dfc2e2aa", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "indicator--4e41c7f0-1e95-4377-8af4-1194adf149df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5f88af08-e926-4e71-9d35-a14dbe0c77d6", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "indicator--f475ad15-765d-4e90-aa5d-3042f47857a1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--917fa45a-9140-4c08-9f5a-8bc974b22e4d", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "indicator--ce293b5c-8816-4923-be3a-f40134a4e022" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--364dc2ad-e2b9-487f-aca3-d602a59d913e", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "indicator--244de742-9fc5-4784-b9c5-083133b094bb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--df510614-222f-4e8c-8a22-1e29841c23d7", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "indicator--fb7d69ea-12bc-4617-bf10-98e85b14e5b2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92d65a1a-0b44-4c9e-9bf3-c39dd30e7da6", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "indicator--d19bf318-6395-456d-a063-07c23752f137" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c38e2df4-c86f-456c-bef0-4c6a43032035", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "target_ref": "indicator--50a4ea37-dbde-4f08-81a4-366f3f2ff9b4" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--22c7b7c7-4f5d-40ea-9983-2734b6673707", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = 'infodocs.kginfocom.com']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.362Z", "name": "Domain Name: infodocs.kginfocom.com", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f4cf0a45-f872-4278-bea1-e4f9997ff97a", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--22c7b7c7-4f5d-40ea-9983-2734b6673707", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4663fc31-c2b3-4b5f-82dd-ea088abf8f9b", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--22c7b7c7-4f5d-40ea-9983-2734b6673707", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f1564f33-b106-47b8-9aae-a7ff405b5e69", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--22c7b7c7-4f5d-40ea-9983-2734b6673707", "target_ref": "indicator--91d85877-8065-4a11-81d5-e4f1bc9db385" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c0524f1a-6e5b-491c-9fb3-b1c23e4d2891", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--22c7b7c7-4f5d-40ea-9983-2734b6673707", "target_ref": "indicator--22a405d6-4699-4af8-bcaf-79fcba6bea55" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f53ce7ba-f342-4d40-91c7-3c9eb9e7e0dc", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--22c7b7c7-4f5d-40ea-9983-2734b6673707", "target_ref": "indicator--81e370e0-c1ca-4c2e-891f-900fe254996d" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bee22f59-6ea5-4acd-964f-4561c8ca6d89", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = 'hwyigd.laccessal.org']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.362Z", "name": "Domain Name: hwyigd.laccessal.org", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b7d47da0-8517-4477-a340-e84f652f4177", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--bee22f59-6ea5-4acd-964f-4561c8ca6d89", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--441bd3a9-c7ab-4a2b-8c59-443046c69d05", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--bee22f59-6ea5-4acd-964f-4561c8ca6d89", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09c43f13-5449-4275-af5f-f402add89c8c", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bee22f59-6ea5-4acd-964f-4561c8ca6d89", "target_ref": "indicator--745bf2b7-8c3d-4f81-b685-9476cde9a9e2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2a0f5d6-a533-4987-ab98-548e819d1b39", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bee22f59-6ea5-4acd-964f-4561c8ca6d89", "target_ref": "indicator--2c479d4a-7d3c-4216-8637-ea18bfd7acca" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b54437c5-deab-4eab-bcec-a2be3aac85ab", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bee22f59-6ea5-4acd-964f-4561c8ca6d89", "target_ref": "indicator--b69e2980-9cb6-42e4-b761-ccf9a72743c9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--61307060-ea74-4dd4-a05b-715cf0a88fc9", "created": "2021-09-03T15:25:42.362Z", "modified": "2021-09-03T15:25:42.362Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bee22f59-6ea5-4acd-964f-4561c8ca6d89", "target_ref": "indicator--e51475c5-d5bc-4fc7-a225-3247ed767812" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01e763fa-51d7-4b3e-ae49-59c347e7ddbf", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bee22f59-6ea5-4acd-964f-4561c8ca6d89", "target_ref": "indicator--a606b947-19d3-4318-8ffc-cca522158282" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9abfaeda-5125-4b78-a487-5b1cbb66fb0c", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bee22f59-6ea5-4acd-964f-4561c8ca6d89", "target_ref": "indicator--5fa28b86-9008-4985-95f0-9734bfced728" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e8b09986-c8a6-49c7-b7ca-f66608d15549", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = 'uslugi.mahallafond.com']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.363Z", "name": "Domain Name: uslugi.mahallafond.com", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2a6967ae-a001-4008-8b44-23cb345d0c43", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--e8b09986-c8a6-49c7-b7ca-f66608d15549", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ad2f0ea4-d88c-4da2-bead-1f79b1af175f", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--e8b09986-c8a6-49c7-b7ca-f66608d15549", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--99d82186-5cf8-418d-8012-7ffc66a7628e", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e8b09986-c8a6-49c7-b7ca-f66608d15549", "target_ref": "indicator--9e976387-d505-4a49-be59-ed61ef6b2b35" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c657546-6ffc-4437-bd1f-af65a6bfc6da", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e8b09986-c8a6-49c7-b7ca-f66608d15549", "target_ref": "indicator--3efee39a-b44f-4b5b-a0b7-81bc315c59eb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--938ead56-7cc4-472f-9420-6615685bf662", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e8b09986-c8a6-49c7-b7ca-f66608d15549", "target_ref": "indicator--fb71a02f-95fb-414e-adee-c9020dcad5d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1aa8852-a60e-4af3-b17e-890e34cda0ee", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e8b09986-c8a6-49c7-b7ca-f66608d15549", "target_ref": "indicator--7db30756-5877-4df5-9e28-a350f23a98f4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2379983e-8925-44ed-88de-e23d08e590d2", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e8b09986-c8a6-49c7-b7ca-f66608d15549", "target_ref": "indicator--d489006c-fbf6-4870-a562-f7a902dcaab9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8ff8248f-5cf1-46c8-b44d-ac9107216bd5", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e8b09986-c8a6-49c7-b7ca-f66608d15549", "target_ref": "indicator--bde7895f-75d9-4707-a581-c338c54b7c49" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a90fc1bb-f103-44f8-af35-d9136417d791", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e8b09986-c8a6-49c7-b7ca-f66608d15549", "target_ref": "indicator--7bc55a37-d1f6-4560-89ef-0cdfc671190d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--94c9201a-33ef-4cad-bec9-5d45bea395ff", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e8b09986-c8a6-49c7-b7ca-f66608d15549", "target_ref": "indicator--5e73c071-3445-4e5a-8ab9-35e81b468933" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e1311cc1-28f0-4699-b274-f2f5daf1fc3e", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e8b09986-c8a6-49c7-b7ca-f66608d15549", "target_ref": "indicator--0a87e865-f342-4a6b-8ddc-33e6a06bc179" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = 'upload.vocalspektor.com']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.363Z", "name": "Domain Name: upload.vocalspektor.com", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f34ca83c-8288-4b8a-b1bc-f76929fc44b5", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9de4c7aa-208a-4fc3-8301-da731533595e", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--21543092-f136-4c6e-a8a9-2f7b6d57985a", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "indicator--c0951c81-2124-49b9-af1f-be31748abd7f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6875461c-9c61-442f-8d03-e1f57c20e5a2", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "indicator--627af53b-68be-412b-8168-7ecf0469ccd4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--60068253-cba0-451f-9064-3fa237b6091d", "created": "2021-09-03T15:25:42.363Z", "modified": "2021-09-03T15:25:42.363Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "indicator--8ebce1f6-0445-4807-858e-3d52dc0541c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--37101459-a169-4130-b0e9-30ff728e7380", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "indicator--71b931b2-9680-45a5-9e4d-13ab1a833e50" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--54d1617c-58f0-4c0a-95e2-abe0530d7662", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "indicator--39515c04-89fd-4cc2-9dd0-107331d90850" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ce65dac9-3619-48d6-8f2c-9f6ee2fa39c5", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "indicator--8178ffae-a7a3-46a7-85ab-7baf4e9dbea3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--26acc1f7-baad-45eb-a3f2-7433e28a8008", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "indicator--5334a7ac-c157-4c91-91b6-35334f9f8e83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e845fd3-e490-4dc7-ba80-d33b3edc25fd", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "indicator--cebb8ff0-418a-4503-80e3-9fc926346e79" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40c761ec-d793-4cb9-ba63-b45783522312", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "indicator--59f89497-bdba-46fe-bb86-6de9e9309b7f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68a9a3f9-4728-460c-b93f-0b37c221bb1d", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "indicator--3c82ae4b-671e-4c8a-aa40-a21adeae929f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d1279ecd-2288-4cb4-a44c-c3752d6b7b0c", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "indicator--c2926340-81f7-4a5c-8059-9f787132b3eb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--95e53bbe-9d08-433c-afdc-a3c2d0c82fe5", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "target_ref": "indicator--5fc0fcaf-a1df-4357-8aff-765dcf22f06c" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2f0ec11b-6ccd-4505-890b-ce62fd67cb47", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = 'ousync.kginfocom.com']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.364Z", "name": "Domain Name: ousync.kginfocom.com", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8cb43ae2-7b21-4faa-8c90-3aa322be9d52", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--2f0ec11b-6ccd-4505-890b-ce62fd67cb47", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5418f37-837a-486e-a18c-0e7ea52fe826", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--2f0ec11b-6ccd-4505-890b-ce62fd67cb47", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c587487d-bd1e-4f10-86c0-5def6ca6f703", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2f0ec11b-6ccd-4505-890b-ce62fd67cb47", "target_ref": "indicator--2443a0e6-3efb-4b7d-8615-19721e907871" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d025140f-cfb2-4ba7-9bc1-7436edbd78db", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2f0ec11b-6ccd-4505-890b-ce62fd67cb47", "target_ref": "indicator--6042c3c8-11bc-4638-829d-b93c13f36a6d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d0f1827d-77aa-40c1-97fb-167f3054fc4a", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--2f0ec11b-6ccd-4505-890b-ce62fd67cb47", "target_ref": "indicator--2607073d-ade7-4e9f-9f54-419dcafab37a" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4b8f804e-5826-44dd-baae-8a55ea3e23e8", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = '6z98os.id597.link']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.364Z", "name": "Domain Name: 6z98os.id597.link", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--42290d3f-e94e-458a-aa23-56e1c19fe855", "created": "2021-09-03T15:25:42.364Z", "modified": "2021-09-03T15:25:42.364Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--4b8f804e-5826-44dd-baae-8a55ea3e23e8", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4e6e312-073f-46b2-b981-bd486527a6a3", "created": "2021-09-03T15:25:42.365Z", "modified": "2021-09-03T15:25:42.365Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--4b8f804e-5826-44dd-baae-8a55ea3e23e8", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--860162e7-703c-4e22-814f-ba37bfd5bf5d", "created": "2021-09-03T15:25:42.365Z", "modified": "2021-09-03T15:25:42.365Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--4b8f804e-5826-44dd-baae-8a55ea3e23e8", "target_ref": "indicator--559f775c-ada9-4214-aa2a-bbef6aa5d4a0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8d7d5248-62b0-4160-9fe7-bfe3f33338b2", "created": "2021-09-03T15:25:42.365Z", "modified": "2021-09-03T15:25:42.365Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--4b8f804e-5826-44dd-baae-8a55ea3e23e8", "target_ref": "indicator--8ae06188-93ff-4a45-be6c-38087289a816" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f964d19a-b22c-4387-a5af-de2221eba47d", "created": "2021-09-03T15:25:42.365Z", "modified": "2021-09-03T15:25:42.365Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--4b8f804e-5826-44dd-baae-8a55ea3e23e8", "target_ref": "indicator--679e97de-ee22-4cce-860d-3095ebc64c7b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4a5b18c0-eed7-4bce-8fdd-3f86d53251cb", "created": "2021-09-03T15:25:42.365Z", "modified": "2021-09-03T15:25:42.365Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--4b8f804e-5826-44dd-baae-8a55ea3e23e8", "target_ref": "indicator--a0395017-7063-47ac-957e-80ece65b3056" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--23d52587-891c-4e70-8145-97b10a4fc276", "created": "2021-09-03T15:25:42.365Z", "modified": "2021-09-03T15:25:42.365Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--4b8f804e-5826-44dd-baae-8a55ea3e23e8", "target_ref": "indicator--d94bde35-6823-4364-871f-94c8786ca419" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c78f5926-c2c3-43ff-b835-b92cbe926891", "created": "2021-09-03T15:25:42.365Z", "modified": "2021-09-03T15:25:42.365Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--4b8f804e-5826-44dd-baae-8a55ea3e23e8", "target_ref": "indicator--361b25ab-d920-4a6d-9246-764ca5721e35" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fac37e5d-e528-444e-b77c-8fd437c465c7", "created": "2021-09-03T15:25:42.365Z", "modified": "2021-09-03T15:25:42.365Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = 'dcc.ungov.org']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.365Z", "name": "Domain Name: dcc.ungov.org", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--511dc3e5-cf4f-4cbb-a041-b1dde3e03278", "created": "2021-09-03T15:25:42.365Z", "modified": "2021-09-03T15:25:42.365Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--fac37e5d-e528-444e-b77c-8fd437c465c7", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dbb5ce05-164e-4503-9115-61693690939b", "created": "2021-09-03T15:25:42.365Z", "modified": "2021-09-03T15:25:42.365Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--fac37e5d-e528-444e-b77c-8fd437c465c7", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--351c3f2b-74fd-45c8-8114-4a48674be1c8", "created": "2021-09-03T15:25:42.365Z", "modified": "2021-09-03T15:25:42.365Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fac37e5d-e528-444e-b77c-8fd437c465c7", "target_ref": "indicator--71dd59b8-f865-4090-a489-8c64ac420b53" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c93a1e9-f911-4ae8-b1d0-88e2afe6cdc2", "created": "2021-09-03T15:25:42.365Z", "modified": "2021-09-03T15:25:42.365Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fac37e5d-e528-444e-b77c-8fd437c465c7", "target_ref": "indicator--764660ad-06e9-4541-83ab-b7d4b862e2b9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d0eaaf13-21c1-4fc9-ab4b-76950d5cd0cb", "created": "2021-09-03T15:25:42.365Z", "modified": "2021-09-03T15:25:42.365Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fac37e5d-e528-444e-b77c-8fd437c465c7", "target_ref": "indicator--6c797b87-276f-4a89-a12f-8b5e1a798d2a" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b1bd1cea-17cc-42bd-bdce-e8bbc3839faa", "created": "2021-09-03T15:25:42.366Z", "modified": "2021-09-03T15:25:42.366Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = 'mail1.ictdp.com']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.366Z", "name": "Domain Name: mail1.ictdp.com", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a0c1cad-056e-4a12-b820-4c4efc091604", "created": "2021-09-03T15:25:42.366Z", "modified": "2021-09-03T15:25:42.366Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--b1bd1cea-17cc-42bd-bdce-e8bbc3839faa", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a175ed0-a23b-4182-8682-771320172ce4", "created": "2021-09-03T15:25:42.366Z", "modified": "2021-09-03T15:25:42.366Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--b1bd1cea-17cc-42bd-bdce-e8bbc3839faa", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4028a5d9-1eb5-41f4-80d9-6053524db741", "created": "2021-09-03T15:25:42.366Z", "modified": "2021-09-03T15:25:42.366Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b1bd1cea-17cc-42bd-bdce-e8bbc3839faa", "target_ref": "indicator--76be25aa-e90b-45aa-8661-50bb74b126e5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5f30747f-188c-47b4-ab87-18a1e594931e", "created": "2021-09-03T15:25:42.366Z", "modified": "2021-09-03T15:25:42.366Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b1bd1cea-17cc-42bd-bdce-e8bbc3839faa", "target_ref": "indicator--f779084c-d990-412b-8fa7-b337b7520ea9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--260d66c1-e0b7-4494-91f3-64474c3c330a", "created": "2021-09-03T15:25:42.366Z", "modified": "2021-09-03T15:25:42.366Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b1bd1cea-17cc-42bd-bdce-e8bbc3839faa", "target_ref": "indicator--130b4eb2-ca05-4abf-9e7b-18e83224260a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f3c89e05-6480-41fc-87db-00391e7dbbe4", "created": "2021-09-03T15:25:42.366Z", "modified": "2021-09-03T15:25:42.366Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b1bd1cea-17cc-42bd-bdce-e8bbc3839faa", "target_ref": "indicator--8cd0b069-db65-448e-9b60-db167106e671" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1a6a2a0d-e600-48a7-ad52-4358f9374780", "created": "2021-09-03T15:25:42.366Z", "modified": "2021-09-03T15:25:42.366Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b1bd1cea-17cc-42bd-bdce-e8bbc3839faa", "target_ref": "indicator--006dccd8-6cfa-4b29-a59b-21c5c300a39f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7a1bea26-555d-4b64-886c-4255d422a135", "created": "2021-09-03T15:25:42.366Z", "modified": "2021-09-03T15:25:42.366Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b1bd1cea-17cc-42bd-bdce-e8bbc3839faa", "target_ref": "indicator--278e1001-80c1-4708-b0a2-64ce3000c5b8" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e68a62cf-83dd-4b33-945c-7e2fcb12aa79", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[domain-name:value = 'update.mudofaa.com']", "description": "SpecCom C2 Domain", "valid_from": "2021-09-03T15:25:42.367Z", "name": "Domain Name: update.mudofaa.com", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7313a71a-6d93-4b0d-9598-d642cbaf3fb0", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--e68a62cf-83dd-4b33-945c-7e2fcb12aa79", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6dbe1c1-8644-4254-8adb-55578fdc123b", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--e68a62cf-83dd-4b33-945c-7e2fcb12aa79", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a0ebb458-0ecf-4e25-8ac8-4a9749bb5439", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e68a62cf-83dd-4b33-945c-7e2fcb12aa79", "target_ref": "indicator--a4097930-94e1-4273-aaca-b9d9bbebd8ac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c5d73cf-b71d-47df-9944-e7a93fca76c7", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e68a62cf-83dd-4b33-945c-7e2fcb12aa79", "target_ref": "indicator--c03d33e4-2742-432c-9463-94bbc39d6208" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--26524392-8860-437c-973c-b86cfd0b1a59", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e68a62cf-83dd-4b33-945c-7e2fcb12aa79", "target_ref": "indicator--b1e987ce-94af-4a20-aa4f-122ff9ca0035" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--63fc8613-d406-43ea-9de0-1f23d0b6f610", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[ipv4-addr:value = '81.95.7.20']", "description": "SpecCom C2 Infrastructure", "valid_from": "2021-09-03T15:25:42.367Z", "name": "IPv4: 81.95.7.20", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b680f8d8-31f3-4ae4-ae38-e3f82efb613b", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--63fc8613-d406-43ea-9de0-1f23d0b6f610", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8bfe16c0-c711-49c7-913a-d9340fb1eb07", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--63fc8613-d406-43ea-9de0-1f23d0b6f610", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--29a0baaa-ab74-42e5-af95-5f697ec02104", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--63fc8613-d406-43ea-9de0-1f23d0b6f610", "target_ref": "indicator--dd67eb53-f9af-4931-904e-7fa9f32f957c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--695de900-9d36-4098-867e-30f952b081bf", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--63fc8613-d406-43ea-9de0-1f23d0b6f610", "target_ref": "indicator--8c405500-14a9-4a16-98b4-3663bf7b2b1c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--58e69a00-1ad6-4c2e-9f0a-85a6cc3df5bc", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--63fc8613-d406-43ea-9de0-1f23d0b6f610", "target_ref": "indicator--1e9a0ecc-2d71-4f93-b971-18af95ff2e9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dca0e5ad-530d-40c7-a2d4-a66df617d39c", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--63fc8613-d406-43ea-9de0-1f23d0b6f610", "target_ref": "indicator--a6bef973-0eb2-42b9-aeb7-9dadf04c5cbd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6b4e7536-fef3-4e1f-929f-794b75f96a7e", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--63fc8613-d406-43ea-9de0-1f23d0b6f610", "target_ref": "indicator--b38b5856-89d0-40d2-a738-c4c10bc743ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5f27472f-fbce-49b6-839a-55dcb6ba38cf", "created": "2021-09-03T15:25:42.367Z", "modified": "2021-09-03T15:25:42.367Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--63fc8613-d406-43ea-9de0-1f23d0b6f610", "target_ref": "indicator--289fa967-5299-49d2-bfea-d0f87686b94a" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--eb5314d8-823e-45ca-ba37-878ea674873f", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/tel/img.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.368Z", "name": "URL: /tel/img.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a575ed6f-f8b8-49c4-9020-499b2b0194f6", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--eb5314d8-823e-45ca-ba37-878ea674873f", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8405b912-d613-405e-bfb1-9db890c0ac3f", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--eb5314d8-823e-45ca-ba37-878ea674873f", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3d473d8d-92dc-4b53-9cec-cb1fce3323a0", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--eb5314d8-823e-45ca-ba37-878ea674873f", "target_ref": "indicator--f2d21f4d-1f63-4a9b-a5fb-2bb19bf8d106" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3df0d263-3764-425d-b2be-7a4cbb3cd498", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--eb5314d8-823e-45ca-ba37-878ea674873f", "target_ref": "indicator--303468cf-ec83-4297-8934-0f7c1a7cddae" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3fea5c57-8169-4153-9412-0313a1d36fe9", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--eb5314d8-823e-45ca-ba37-878ea674873f", "target_ref": "indicator--daf9dfe5-42e1-455c-9782-b4ae201d064a" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4fcc7161-e9bd-42e7-a606-5b8f55069eef", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/tel/word.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.368Z", "name": "URL: /tel/word.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e727e669-cca4-4d3a-92c7-0fbdb32ec16d", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--4fcc7161-e9bd-42e7-a606-5b8f55069eef", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53e33702-883c-4a51-a7c1-89abd505c6d0", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--4fcc7161-e9bd-42e7-a606-5b8f55069eef", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--518d8e93-eeb4-4445-9a64-bfd603eb792f", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--4fcc7161-e9bd-42e7-a606-5b8f55069eef", "target_ref": "indicator--f2d21f4d-1f63-4a9b-a5fb-2bb19bf8d106" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--baf84c46-2b8e-4678-aa8b-e1322282c278", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--4fcc7161-e9bd-42e7-a606-5b8f55069eef", "target_ref": "indicator--303468cf-ec83-4297-8934-0f7c1a7cddae" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b0776d1e-c904-4bdb-9819-0177487e63f6", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--4fcc7161-e9bd-42e7-a606-5b8f55069eef", "target_ref": "indicator--daf9dfe5-42e1-455c-9782-b4ae201d064a" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9135fe23-4edb-41af-84f4-6afbfa0351cc", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/7kcowm/img.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.368Z", "name": "URL: /7kcowm/img.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--988de095-aa06-4904-8241-36fbe45d0448", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--9135fe23-4edb-41af-84f4-6afbfa0351cc", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4dc2af3d-2f6a-4dd5-a20d-2c8451f9d9f8", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--9135fe23-4edb-41af-84f4-6afbfa0351cc", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c768655d-f737-4066-87a0-bea733094581", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9135fe23-4edb-41af-84f4-6afbfa0351cc", "target_ref": "indicator--54ceb17b-2713-4015-84c1-c5aefb62aa0c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5db3facc-2609-4c2e-b02a-3057c38611d1", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9135fe23-4edb-41af-84f4-6afbfa0351cc", "target_ref": "indicator--f7ca8982-e058-4bdd-abc3-e1ace5944d0e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ed0c42a5-65c6-45f0-80af-94327cf63051", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9135fe23-4edb-41af-84f4-6afbfa0351cc", "target_ref": "indicator--b859d1e3-7e2d-4c54-b8e7-36428190a238" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--87f1aa26-ccba-47a0-9b1f-1918cb1f5747", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/7kcowm/word.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.368Z", "name": "URL: /7kcowm/word.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--550be8f6-f629-4e53-b350-f60906695991", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--87f1aa26-ccba-47a0-9b1f-1918cb1f5747", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--76424633-77ad-42ea-b2e9-782eb1f6c1fa", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--87f1aa26-ccba-47a0-9b1f-1918cb1f5747", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e207f908-47fd-4d0f-b893-9cefdb6f617e", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--87f1aa26-ccba-47a0-9b1f-1918cb1f5747", "target_ref": "indicator--54ceb17b-2713-4015-84c1-c5aefb62aa0c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--db397998-6550-4415-91de-2702dd1dd085", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--87f1aa26-ccba-47a0-9b1f-1918cb1f5747", "target_ref": "indicator--f7ca8982-e058-4bdd-abc3-e1ace5944d0e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f9ea60f-fb9c-4f5b-8d54-072cd1b743c1", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--87f1aa26-ccba-47a0-9b1f-1918cb1f5747", "target_ref": "indicator--b859d1e3-7e2d-4c54-b8e7-36428190a238" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d57b50ca-aa34-4753-8a02-446f0c0baf8e", "created": "2021-09-03T15:25:42.368Z", "modified": "2021-09-03T15:25:42.368Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/new/js.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.368Z", "name": "URL: /new/js.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4991672d-eafa-4aba-8773-be8660e0d557", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--d57b50ca-aa34-4753-8a02-446f0c0baf8e", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b0bcc9aa-923a-419f-97f7-b422caf89f00", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--d57b50ca-aa34-4753-8a02-446f0c0baf8e", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--270bc27b-3a34-4b32-be89-6c6ed62f0b44", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d57b50ca-aa34-4753-8a02-446f0c0baf8e", "target_ref": "indicator--7fe31ba6-462c-4e6e-afc6-61aa595d22a5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--27d88812-78b4-47bd-a26f-c9376897a0ef", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d57b50ca-aa34-4753-8a02-446f0c0baf8e", "target_ref": "indicator--337e2e7c-f259-426e-abe4-3ec2960385dd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e7b9eca6-7c4d-4a7c-ac05-a8f24b1cf9b3", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d57b50ca-aa34-4753-8a02-446f0c0baf8e", "target_ref": "indicator--3bdc2323-dc7e-472e-864a-730d97035264" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e7138fe0-56bf-4da6-a968-119d07dddff7", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d57b50ca-aa34-4753-8a02-446f0c0baf8e", "target_ref": "indicator--42352416-115b-4d76-af2c-b4898bfb5611" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8eeb0a93-65dd-4f1c-9d70-08d554f14388", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d57b50ca-aa34-4753-8a02-446f0c0baf8e", "target_ref": "indicator--f1804e4b-4fc8-4e95-bbf3-cb990d607071" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a79d34a8-284c-4b10-a1e0-e9b6179c08f2", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d57b50ca-aa34-4753-8a02-446f0c0baf8e", "target_ref": "indicator--5170e2e6-833d-4fce-a434-15eb3a5e0867" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3823a0ad-f2ae-45a0-b022-7aa83a33ef87", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d57b50ca-aa34-4753-8a02-446f0c0baf8e", "target_ref": "indicator--be27adea-c70d-478f-bc25-513bc30bb5d0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6b3ea265-c648-4b4a-aed1-0e7ea3f82397", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d57b50ca-aa34-4753-8a02-446f0c0baf8e", "target_ref": "indicator--472c6111-5abb-4ca9-93da-9efdddbf098a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--156a6ea9-0624-4aaa-b086-7ea26433f8c1", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d57b50ca-aa34-4753-8a02-446f0c0baf8e", "target_ref": "indicator--db538a27-eda1-4837-b1d5-3963fb903843" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1504b1df-6919-475c-979f-b3b871147156", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/new/art.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.369Z", "name": "URL: /new/art.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89b46c27-1271-4f96-96fc-7211c0858f81", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--1504b1df-6919-475c-979f-b3b871147156", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d0a6d26-3fea-4355-be12-d8989dfe4001", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--1504b1df-6919-475c-979f-b3b871147156", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6da71ba8-0e39-47c8-b78a-3d4d327f4912", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1504b1df-6919-475c-979f-b3b871147156", "target_ref": "indicator--7fe31ba6-462c-4e6e-afc6-61aa595d22a5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0ea28d95-d81f-4e4d-9ad9-11bac80133b6", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1504b1df-6919-475c-979f-b3b871147156", "target_ref": "indicator--337e2e7c-f259-426e-abe4-3ec2960385dd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb8459f4-e60c-43f6-aad4-55d5c0f9f8a6", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1504b1df-6919-475c-979f-b3b871147156", "target_ref": "indicator--3bdc2323-dc7e-472e-864a-730d97035264" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--423e1346-cf6d-4bb0-b963-7331e434bc7e", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1504b1df-6919-475c-979f-b3b871147156", "target_ref": "indicator--42352416-115b-4d76-af2c-b4898bfb5611" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c82de99-4f6e-4c2d-b152-a70fac1ca29b", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1504b1df-6919-475c-979f-b3b871147156", "target_ref": "indicator--f1804e4b-4fc8-4e95-bbf3-cb990d607071" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dcbec21e-458e-4c1b-a366-3bca7e2a7d06", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1504b1df-6919-475c-979f-b3b871147156", "target_ref": "indicator--5170e2e6-833d-4fce-a434-15eb3a5e0867" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--997b8a30-bd66-4f31-8bf4-cb243ec2de6a", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1504b1df-6919-475c-979f-b3b871147156", "target_ref": "indicator--be27adea-c70d-478f-bc25-513bc30bb5d0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--761541a0-0ee0-463e-ac22-f0fa15f3539f", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1504b1df-6919-475c-979f-b3b871147156", "target_ref": "indicator--472c6111-5abb-4ca9-93da-9efdddbf098a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a80d8c76-78d2-45b6-9c50-49826509d927", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1504b1df-6919-475c-979f-b3b871147156", "target_ref": "indicator--db538a27-eda1-4837-b1d5-3963fb903843" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8bf8add6-cf7a-49b3-a714-6c94b9069269", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/momo/js.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.369Z", "name": "URL: /momo/js.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--542f962b-ad78-4bc2-be0d-fb109bfd7d7a", "created": "2021-09-03T15:25:42.369Z", "modified": "2021-09-03T15:25:42.369Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--8bf8add6-cf7a-49b3-a714-6c94b9069269", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc1a02d5-851d-474f-8be5-20cfb6d891d2", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--8bf8add6-cf7a-49b3-a714-6c94b9069269", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ba9348f-9b7b-4f54-94a7-273bb31dfe69", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--8bf8add6-cf7a-49b3-a714-6c94b9069269", "target_ref": "indicator--9d69c06a-0d35-4dd5-9d91-5ffe2d1bae65" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e08f80e-b542-4397-b296-ac1df92d8ce5", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--8bf8add6-cf7a-49b3-a714-6c94b9069269", "target_ref": "indicator--5bb109f9-1208-420b-b23f-988b3d8e7d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e25fd383-345d-4504-ac63-69791ba0eb61", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--8bf8add6-cf7a-49b3-a714-6c94b9069269", "target_ref": "indicator--7c6c82b8-d50e-4275-8d40-7231e7388385" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--69a07a77-f0fd-43f0-9ead-cfb4e8e57b0c", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--8bf8add6-cf7a-49b3-a714-6c94b9069269", "target_ref": "indicator--2f5504f2-a62b-469a-8850-29ac9b831f78" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--21cb56b9-af7d-4ed5-8e99-7744f2506cfe", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--8bf8add6-cf7a-49b3-a714-6c94b9069269", "target_ref": "indicator--e3faf8e8-84be-4904-9f78-43a0577807da" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92b891b2-977d-41e7-895e-6ad0b93f8ed6", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--8bf8add6-cf7a-49b3-a714-6c94b9069269", "target_ref": "indicator--12abfb3c-89d8-4751-bc8c-4fe10c376dd7" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1afd5794-af1a-420c-9669-6f0a73b8c684", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/momo/art.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.370Z", "name": "URL: /momo/art.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a4faae4c-63da-4538-8d19-30a0b2c4bd3d", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--1afd5794-af1a-420c-9669-6f0a73b8c684", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e5772b9-ac6b-4042-80d3-ec6d8a4bfc17", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--1afd5794-af1a-420c-9669-6f0a73b8c684", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d26d1c1d-6525-4978-97e3-5ed47aa673e7", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1afd5794-af1a-420c-9669-6f0a73b8c684", "target_ref": "indicator--9d69c06a-0d35-4dd5-9d91-5ffe2d1bae65" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7181eb00-cff4-4e27-92f5-809ce070d5e3", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1afd5794-af1a-420c-9669-6f0a73b8c684", "target_ref": "indicator--5bb109f9-1208-420b-b23f-988b3d8e7d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9da5c8ce-8dc4-4205-8641-7f2db834951b", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1afd5794-af1a-420c-9669-6f0a73b8c684", "target_ref": "indicator--7c6c82b8-d50e-4275-8d40-7231e7388385" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c8b4bf0-167b-41f5-ae5f-bfe263d5592f", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1afd5794-af1a-420c-9669-6f0a73b8c684", "target_ref": "indicator--2f5504f2-a62b-469a-8850-29ac9b831f78" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2f66ad7-0f13-4ec0-8d79-519a51fe3bfb", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1afd5794-af1a-420c-9669-6f0a73b8c684", "target_ref": "indicator--e3faf8e8-84be-4904-9f78-43a0577807da" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ebb2edf-18d6-4e2f-8f98-6376925c428e", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1afd5794-af1a-420c-9669-6f0a73b8c684", "target_ref": "indicator--12abfb3c-89d8-4751-bc8c-4fe10c376dd7" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7d84a7d1-0ca3-4ecf-b253-5beaee9745b1", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/0kcowm/img.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.370Z", "name": "URL: /0kcowm/img.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--411727b8-c44d-4f98-a343-3604a1bc656e", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--7d84a7d1-0ca3-4ecf-b253-5beaee9745b1", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--14c15204-962e-4df5-8167-1803d75c09e8", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--7d84a7d1-0ca3-4ecf-b253-5beaee9745b1", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d0db3ab1-478f-46db-98c5-344ce9f3e93a", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--7d84a7d1-0ca3-4ecf-b253-5beaee9745b1", "target_ref": "indicator--661e198a-dfc1-4915-90d2-d7cc4722b92f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--363043a2-37c2-422c-81b2-05d6813785f1", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--7d84a7d1-0ca3-4ecf-b253-5beaee9745b1", "target_ref": "indicator--9d5aad6f-3625-4fc4-9d9e-7d0c6e59a0f7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c2c533b-d29c-460a-b059-0b63edb2da7d", "created": "2021-09-03T15:25:42.370Z", "modified": "2021-09-03T15:25:42.370Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--7d84a7d1-0ca3-4ecf-b253-5beaee9745b1", "target_ref": "indicator--3f00a455-93e3-4a5a-96d1-cf326c0d15aa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--de9c9302-ffd9-4eda-84bd-57d8a5d8f69e", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/0kcowm/word.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.371Z", "name": "URL: /0kcowm/word.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c4a10262-15b0-4117-a525-d37d9119d2f3", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--de9c9302-ffd9-4eda-84bd-57d8a5d8f69e", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a79887fc-64de-477c-89e0-a0e9a46d16d4", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--de9c9302-ffd9-4eda-84bd-57d8a5d8f69e", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--df343e77-0432-4989-a0e7-f3fb1cc54066", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--de9c9302-ffd9-4eda-84bd-57d8a5d8f69e", "target_ref": "indicator--661e198a-dfc1-4915-90d2-d7cc4722b92f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ad0ea596-009a-4839-851b-43b7e5f5592a", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--de9c9302-ffd9-4eda-84bd-57d8a5d8f69e", "target_ref": "indicator--9d5aad6f-3625-4fc4-9d9e-7d0c6e59a0f7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--740a86a7-75eb-4d93-b6e5-8732498ad347", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--de9c9302-ffd9-4eda-84bd-57d8a5d8f69e", "target_ref": "indicator--3f00a455-93e3-4a5a-96d1-cf326c0d15aa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/help/js.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.371Z", "name": "URL: /help/js.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2940f37d-15a2-483b-9449-ff821d7a6325", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eb3c19a6-d23e-40dd-86c6-b498bcf6bcdb", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b40432b9-1eb5-4d19-aa8d-cf824384ea60", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "indicator--6c731b78-d08a-4da5-8d82-837035a4f9f5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--35418a58-01d0-48c8-8bb1-23f48361a573", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "indicator--1b23b0f1-f289-4e4e-9d1a-a893400cc0da" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--54356106-3987-44d4-bcf1-db7dc0fe56b1", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "indicator--fd319899-a1e1-4d82-9ec4-624c34f81db2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0ccf17e1-e0f8-4a17-ab1b-6ac72c66097d", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "indicator--775698f0-823f-4097-ab3f-e5f5bb2a2dad" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b98baea-412a-4a2c-9718-8e61d2d69c1e", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "indicator--6a7777fc-fcf1-42a8-bb3d-0d5b5bae5bee" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f71ca0aa-70aa-41b4-8ad6-22e826177138", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "indicator--4e41c7f0-1e95-4377-8af4-1194adf149df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd7b7267-8ee0-4e7f-8089-b4c495b92363", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "indicator--f475ad15-765d-4e90-aa5d-3042f47857a1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f31494d-b6b7-48a4-a987-1958690b7ef7", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "indicator--ce293b5c-8816-4923-be3a-f40134a4e022" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dbbcef32-cbfa-4f96-bb65-eb3052dcb7aa", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "indicator--244de742-9fc5-4784-b9c5-083133b094bb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4ffc77be-119a-49c3-b2a5-66a1611b1b3d", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "indicator--fb7d69ea-12bc-4617-bf10-98e85b14e5b2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d06db9a-5522-40f0-a5d9-92ad7adc0ee2", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "indicator--d19bf318-6395-456d-a063-07c23752f137" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18d763bc-5b48-48fc-919a-9635d469f1d1", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "target_ref": "indicator--50a4ea37-dbde-4f08-81a4-366f3f2ff9b4" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/help/art.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.371Z", "name": "URL: /help/art.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d564ffce-1d9d-441e-8734-0c21fe1ae874", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6da5a72b-c64d-43f3-8b3a-28666dece784", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3bb7e813-8812-454c-a6f0-6c3eda51a31b", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "indicator--6c731b78-d08a-4da5-8d82-837035a4f9f5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1ab0422-1714-43ab-8699-7293575e5852", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.371Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "indicator--1b23b0f1-f289-4e4e-9d1a-a893400cc0da" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4df4497-7b52-4681-8123-e32db50f4ae1", "created": "2021-09-03T15:25:42.371Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "indicator--fd319899-a1e1-4d82-9ec4-624c34f81db2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--55e6478d-6ec0-492a-bb65-e50afd361674", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "indicator--775698f0-823f-4097-ab3f-e5f5bb2a2dad" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d77620a0-9abf-4d2d-9a67-d34714e1eed3", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "indicator--6a7777fc-fcf1-42a8-bb3d-0d5b5bae5bee" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e67b8a33-cb88-4226-b476-5db011b88b38", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "indicator--4e41c7f0-1e95-4377-8af4-1194adf149df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f775e461-6442-452f-8ed9-a0f676210657", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "indicator--f475ad15-765d-4e90-aa5d-3042f47857a1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d33390db-820a-46b8-8662-c796ae57fb9c", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "indicator--ce293b5c-8816-4923-be3a-f40134a4e022" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd3b3971-dd93-4399-8229-8f41d446f2ca", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "indicator--244de742-9fc5-4784-b9c5-083133b094bb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--61b71f1f-8957-4573-8e33-ec6d88050946", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "indicator--fb7d69ea-12bc-4617-bf10-98e85b14e5b2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68a986d2-8c7d-4bc7-b106-8287a77f6994", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "indicator--d19bf318-6395-456d-a063-07c23752f137" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--95877ec0-7bc9-4582-8e81-5414e8cb3e05", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "target_ref": "indicator--50a4ea37-dbde-4f08-81a4-366f3f2ff9b4" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fbda9c46-a32c-4afe-ac89-a90b77cb2ab5", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/gin/tab.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.372Z", "name": "URL: /gin/tab.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18d8bf06-0481-4ec3-a57d-a0f93fc4b9d6", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--fbda9c46-a32c-4afe-ac89-a90b77cb2ab5", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dcc73e60-98c5-47fb-b25b-51ce1ab06f42", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--fbda9c46-a32c-4afe-ac89-a90b77cb2ab5", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--72c292a0-a671-4d71-af28-fb97de92daaf", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fbda9c46-a32c-4afe-ac89-a90b77cb2ab5", "target_ref": "indicator--91d85877-8065-4a11-81d5-e4f1bc9db385" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--731bbc61-e1b9-4665-8049-3f5896992df3", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fbda9c46-a32c-4afe-ac89-a90b77cb2ab5", "target_ref": "indicator--22a405d6-4699-4af8-bcaf-79fcba6bea55" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f79272e0-4898-4263-9c1a-8ad8a5b075bb", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--fbda9c46-a32c-4afe-ac89-a90b77cb2ab5", "target_ref": "indicator--81e370e0-c1ca-4c2e-891f-900fe254996d" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c4979765-0f5e-406a-ae56-8722f934bb7a", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/gin/kw.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.372Z", "name": "URL: /gin/kw.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d6ab1a11-4e4b-4276-bb62-0a9985406675", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--c4979765-0f5e-406a-ae56-8722f934bb7a", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--feb904e2-e2d5-4197-923c-4b9328ff6138", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--c4979765-0f5e-406a-ae56-8722f934bb7a", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9763ada-0e32-4ab0-a257-41ad96ae1009", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--c4979765-0f5e-406a-ae56-8722f934bb7a", "target_ref": "indicator--91d85877-8065-4a11-81d5-e4f1bc9db385" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc619a08-306e-4737-b1e1-4c2dbb6698fd", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--c4979765-0f5e-406a-ae56-8722f934bb7a", "target_ref": "indicator--22a405d6-4699-4af8-bcaf-79fcba6bea55" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e11375e4-2cc7-43da-9eda-119d86a75edb", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--c4979765-0f5e-406a-ae56-8722f934bb7a", "target_ref": "indicator--81e370e0-c1ca-4c2e-891f-900fe254996d" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/news/js.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.372Z", "name": "URL: /news/js.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6863cf35-8fd1-4616-b8d5-46f24f7442ac", "created": "2021-09-03T15:25:42.372Z", "modified": "2021-09-03T15:25:42.372Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c1ea536a-9138-4068-a418-a6b5820f4fab", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2cb32bcd-663d-4d52-9ee4-ee416ed899f4", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "indicator--dd67eb53-f9af-4931-904e-7fa9f32f957c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8082e21-ad5b-4f5b-afb2-ec0c59d89539", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "indicator--8c405500-14a9-4a16-98b4-3663bf7b2b1c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f746a148-3f82-4697-9097-31e4047790f1", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "indicator--1e9a0ecc-2d71-4f93-b971-18af95ff2e9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0cc98596-7a8d-465d-882c-c6fc7bb47439", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "indicator--745bf2b7-8c3d-4f81-b685-9476cde9a9e2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50d7ffab-96dd-4104-ae3e-b793f6926d69", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "indicator--2c479d4a-7d3c-4216-8637-ea18bfd7acca" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bfdcbb39-7615-40e8-9f57-1709ed9c126a", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "indicator--b69e2980-9cb6-42e4-b761-ccf9a72743c9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--14771809-e2c4-449a-b5fa-4d6124a19fb0", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "indicator--a6bef973-0eb2-42b9-aeb7-9dadf04c5cbd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5bd33efd-e80d-44ab-b537-2930e97a10c3", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "indicator--b38b5856-89d0-40d2-a738-c4c10bc743ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--76ee618b-445d-4bee-b066-2ae67fd19d7b", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "indicator--289fa967-5299-49d2-bfea-d0f87686b94a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2833a2d-f56a-4106-aa05-3eb592093adc", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "indicator--e51475c5-d5bc-4fc7-a225-3247ed767812" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9a95f48d-7405-4b5d-ac6d-bfc3422ae939", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "indicator--a606b947-19d3-4318-8ffc-cca522158282" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4c0ef85-d168-4af1-8294-3ce8a07fa39c", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "target_ref": "indicator--5fa28b86-9008-4985-95f0-9734bfced728" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/news/art.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.373Z", "name": "URL: /news/art.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1776323f-dfec-40a7-9d9c-9db3de288573", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1c5b14a-da6d-46fa-b9fb-c18013037b71", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68ecdbbe-ee45-4386-849c-93030db700f9", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "indicator--dd67eb53-f9af-4931-904e-7fa9f32f957c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9df81b0e-5c78-4584-aab0-8695abdb18f4", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "indicator--8c405500-14a9-4a16-98b4-3663bf7b2b1c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee423b0c-20fb-4e11-89f4-a39dfe5c4b79", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "indicator--1e9a0ecc-2d71-4f93-b971-18af95ff2e9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca8b4015-7e09-4d3b-97f3-cc60b6062378", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "indicator--745bf2b7-8c3d-4f81-b685-9476cde9a9e2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d70d26c8-f285-47de-a782-a29744bed381", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "indicator--2c479d4a-7d3c-4216-8637-ea18bfd7acca" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40612bbb-89c4-41b1-a8f6-9be6afc3b33c", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "indicator--b69e2980-9cb6-42e4-b761-ccf9a72743c9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--daa02846-2f42-420e-8730-d715dedafab0", "created": "2021-09-03T15:25:42.373Z", "modified": "2021-09-03T15:25:42.373Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "indicator--a6bef973-0eb2-42b9-aeb7-9dadf04c5cbd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5580412c-e826-445f-9529-855df5b1c1a5", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "indicator--b38b5856-89d0-40d2-a738-c4c10bc743ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--719aeef2-044b-4566-8e72-dda9f6944aeb", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "indicator--289fa967-5299-49d2-bfea-d0f87686b94a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--51d06b48-603f-4ee6-92b9-b6de036462a9", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "indicator--e51475c5-d5bc-4fc7-a225-3247ed767812" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c0724bae-d8df-4be4-a6a2-4bb7929555e6", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "indicator--a606b947-19d3-4318-8ffc-cca522158282" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--02e7e0b5-1ddb-4cdb-bec7-13bd332c4c1c", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "target_ref": "indicator--5fa28b86-9008-4985-95f0-9734bfced728" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b4737137-e021-4618-92b0-55d98c297418", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/hall/tab.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.374Z", "name": "URL: /hall/tab.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4aafab3b-9c75-4f99-8c09-fe9dd22009d3", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--b4737137-e021-4618-92b0-55d98c297418", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9ce8efd-361a-4fd6-8815-ea7a0482fa76", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--b4737137-e021-4618-92b0-55d98c297418", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--857caef7-40d5-4b0f-a9fe-dd6b7e19f815", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b4737137-e021-4618-92b0-55d98c297418", "target_ref": "indicator--9e976387-d505-4a49-be59-ed61ef6b2b35" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bf737209-f72b-43f7-b453-289e51cd646b", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b4737137-e021-4618-92b0-55d98c297418", "target_ref": "indicator--3efee39a-b44f-4b5b-a0b7-81bc315c59eb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e699253f-78fb-47ef-9feb-6a54e2f47219", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b4737137-e021-4618-92b0-55d98c297418", "target_ref": "indicator--fb71a02f-95fb-414e-adee-c9020dcad5d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d7825fdc-55ef-45a6-98ef-24b3e3aabb95", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b4737137-e021-4618-92b0-55d98c297418", "target_ref": "indicator--7db30756-5877-4df5-9e28-a350f23a98f4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--615e7279-2209-4afb-9661-269a22bda8d1", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b4737137-e021-4618-92b0-55d98c297418", "target_ref": "indicator--d489006c-fbf6-4870-a562-f7a902dcaab9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9080f73-dedd-47f3-a16e-86998d063f35", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b4737137-e021-4618-92b0-55d98c297418", "target_ref": "indicator--bde7895f-75d9-4707-a581-c338c54b7c49" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9a7101e6-6e9d-43d9-ba08-9d5fae8f7eb8", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b4737137-e021-4618-92b0-55d98c297418", "target_ref": "indicator--7bc55a37-d1f6-4560-89ef-0cdfc671190d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5080e28-070f-459d-ba5d-80bd8b1ab582", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b4737137-e021-4618-92b0-55d98c297418", "target_ref": "indicator--5e73c071-3445-4e5a-8ab9-35e81b468933" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa21981f-87a7-4284-97ef-0cb2d4213bf7", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--b4737137-e021-4618-92b0-55d98c297418", "target_ref": "indicator--0a87e865-f342-4a6b-8ddc-33e6a06bc179" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e73b0159-b059-4519-bca0-097aa4d74c3c", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/hall/kw.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.374Z", "name": "URL: /hall/kw.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e040b1c-ab5c-42a9-82f7-18d9d6db0b6f", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--e73b0159-b059-4519-bca0-097aa4d74c3c", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--807f0502-21fa-4b2a-9799-0daa32bdbb33", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--e73b0159-b059-4519-bca0-097aa4d74c3c", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dbd3eca8-dce6-4b5c-b56c-c17ce3498559", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e73b0159-b059-4519-bca0-097aa4d74c3c", "target_ref": "indicator--9e976387-d505-4a49-be59-ed61ef6b2b35" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a122d4fb-a771-4031-9618-4691ec0523ae", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e73b0159-b059-4519-bca0-097aa4d74c3c", "target_ref": "indicator--3efee39a-b44f-4b5b-a0b7-81bc315c59eb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64992c7d-e1b5-4e66-8336-e2ede4d25239", "created": "2021-09-03T15:25:42.374Z", "modified": "2021-09-03T15:25:42.374Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e73b0159-b059-4519-bca0-097aa4d74c3c", "target_ref": "indicator--fb71a02f-95fb-414e-adee-c9020dcad5d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e9d1d7d-a5c7-4cf8-8029-62b598a26a28", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e73b0159-b059-4519-bca0-097aa4d74c3c", "target_ref": "indicator--7db30756-5877-4df5-9e28-a350f23a98f4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--180e8048-e736-4356-945b-a384049ecaa5", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e73b0159-b059-4519-bca0-097aa4d74c3c", "target_ref": "indicator--d489006c-fbf6-4870-a562-f7a902dcaab9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--256d77da-1221-4fb2-9b0d-aab0185f8080", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e73b0159-b059-4519-bca0-097aa4d74c3c", "target_ref": "indicator--bde7895f-75d9-4707-a581-c338c54b7c49" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--953056b5-d757-45d8-9f93-87563fefcfb2", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e73b0159-b059-4519-bca0-097aa4d74c3c", "target_ref": "indicator--7bc55a37-d1f6-4560-89ef-0cdfc671190d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b49c684-da98-41fe-810a-0f10d32d2723", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e73b0159-b059-4519-bca0-097aa4d74c3c", "target_ref": "indicator--5e73c071-3445-4e5a-8ab9-35e81b468933" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--81516e96-ea19-4018-8cb0-5bd720d3262d", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--e73b0159-b059-4519-bca0-097aa4d74c3c", "target_ref": "indicator--0a87e865-f342-4a6b-8ddc-33e6a06bc179" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/images/js.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.375Z", "name": "URL: /images/js.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e743cbfe-22b6-43e4-a026-75d98e6495c2", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--69344260-eec9-4e57-973e-49ccbbaa8a99", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b23c8e01-df05-4048-ba73-b2e1468a7d0a", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "indicator--c0951c81-2124-49b9-af1f-be31748abd7f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8403f641-bacc-42bd-b2ed-5619b0e15bf1", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "indicator--627af53b-68be-412b-8168-7ecf0469ccd4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--acff6b72-0711-44cc-a316-9a49cef7885f", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "indicator--8ebce1f6-0445-4807-858e-3d52dc0541c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--346b617c-b9e4-45f6-aed0-5f308ccac012", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "indicator--71b931b2-9680-45a5-9e4d-13ab1a833e50" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5dd0d33-8a9c-47e2-b3ce-c79866d00a9b", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "indicator--39515c04-89fd-4cc2-9dd0-107331d90850" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--00f66891-1322-4c11-a30c-12c9dc126da8", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "indicator--8178ffae-a7a3-46a7-85ab-7baf4e9dbea3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3bd18985-213c-4dc0-86cc-820b9cf4815a", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "indicator--5334a7ac-c157-4c91-91b6-35334f9f8e83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--52698fa8-137e-43d9-8366-4e711dbc78df", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "indicator--cebb8ff0-418a-4503-80e3-9fc926346e79" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--03e8694f-e015-4109-9831-93641bb18cda", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "indicator--59f89497-bdba-46fe-bb86-6de9e9309b7f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--669c7d71-0576-4c32-85b3-b68342386b3f", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "indicator--3c82ae4b-671e-4c8a-aa40-a21adeae929f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6990b049-9eb7-4333-84b0-a93bb21f1380", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "indicator--c2926340-81f7-4a5c-8059-9f787132b3eb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--59632d0c-c507-4f6e-a87b-2e89a8cecf04", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "target_ref": "indicator--5fc0fcaf-a1df-4357-8aff-765dcf22f06c" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/images/art.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.375Z", "name": "URL: /images/art.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ebdfcb27-a89a-4ab6-9cab-d623e0e66be9", "created": "2021-09-03T15:25:42.375Z", "modified": "2021-09-03T15:25:42.375Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb6189c1-f59a-493a-adfc-0f891edf4da4", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2cb01ab-4d6b-45ab-8fa9-97617867a6a7", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "indicator--c0951c81-2124-49b9-af1f-be31748abd7f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c7fffdee-0ce0-4224-a090-f3c55d543b64", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "indicator--627af53b-68be-412b-8168-7ecf0469ccd4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--567dbf0e-1359-4ac7-a323-375f2b7b4464", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "indicator--8ebce1f6-0445-4807-858e-3d52dc0541c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e8063e2-c029-440a-a7b1-9468640fc33d", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "indicator--71b931b2-9680-45a5-9e4d-13ab1a833e50" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0c72192b-315f-4bd7-9aef-854aa45c5c03", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "indicator--39515c04-89fd-4cc2-9dd0-107331d90850" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--645cf691-0038-4f4f-a663-56943671819b", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "indicator--8178ffae-a7a3-46a7-85ab-7baf4e9dbea3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bca3304a-fe69-44dd-8801-47429e44769f", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "indicator--5334a7ac-c157-4c91-91b6-35334f9f8e83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3a44362a-fe54-4cb2-bb61-3a2ad34da0a9", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "indicator--cebb8ff0-418a-4503-80e3-9fc926346e79" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--451cf7b7-e7c0-42b6-93ee-9bf3d6b76ec6", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "indicator--59f89497-bdba-46fe-bb86-6de9e9309b7f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6d3bac25-7946-4f88-86d9-dc3a5c9878bf", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "indicator--3c82ae4b-671e-4c8a-aa40-a21adeae929f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee0e3399-1771-48ff-b779-7d31700742a4", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "indicator--c2926340-81f7-4a5c-8059-9f787132b3eb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8bbcf940-bf01-48d8-98a5-f4f8a5b3cf4a", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "target_ref": "indicator--5fc0fcaf-a1df-4357-8aff-765dcf22f06c" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--51e5dddb-0080-40e1-a41e-d17d727b6f3c", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/sync/tab.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.376Z", "name": "URL: /sync/tab.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4b290bdd-0636-4124-afe4-84b18a0496c6", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--51e5dddb-0080-40e1-a41e-d17d727b6f3c", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--25dd9622-ac02-4bdd-9956-edb45716a28e", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--51e5dddb-0080-40e1-a41e-d17d727b6f3c", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89315890-9bf1-4bbe-9e53-eab5e388de24", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--51e5dddb-0080-40e1-a41e-d17d727b6f3c", "target_ref": "indicator--2443a0e6-3efb-4b7d-8615-19721e907871" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5dcae2f0-e53b-4c59-bb25-4e12aa095fe5", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--51e5dddb-0080-40e1-a41e-d17d727b6f3c", "target_ref": "indicator--6042c3c8-11bc-4638-829d-b93c13f36a6d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--98137cb2-3f55-4442-a86f-532705b5c8d1", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--51e5dddb-0080-40e1-a41e-d17d727b6f3c", "target_ref": "indicator--2607073d-ade7-4e9f-9f54-419dcafab37a" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c8e02e81-f4c3-496d-b408-fb0dc04926ff", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/sync/kw.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.376Z", "name": "URL: /sync/kw.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ccb5cec-7ae9-419f-a325-f7c541f08274", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--c8e02e81-f4c3-496d-b408-fb0dc04926ff", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aff06b9f-25e0-45e5-9a39-b8bd2f6140f8", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--c8e02e81-f4c3-496d-b408-fb0dc04926ff", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--360de7c0-9997-4c9b-b878-60fcfdfa7257", "created": "2021-09-03T15:25:42.376Z", "modified": "2021-09-03T15:25:42.376Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--c8e02e81-f4c3-496d-b408-fb0dc04926ff", "target_ref": "indicator--2443a0e6-3efb-4b7d-8615-19721e907871" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--170df982-a62b-447d-b0e2-18cd9113885a", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--c8e02e81-f4c3-496d-b408-fb0dc04926ff", "target_ref": "indicator--6042c3c8-11bc-4638-829d-b93c13f36a6d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89ab88b8-e41a-4382-99c4-5b972d4bbc64", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--c8e02e81-f4c3-496d-b408-fb0dc04926ff", "target_ref": "indicator--2607073d-ade7-4e9f-9f54-419dcafab37a" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6afa65fd-e0dd-44fc-99f7-35490d6e9e41", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/css/js.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.377Z", "name": "URL: /css/js.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d05458f3-2461-4053-b5a1-b82c95e8f29e", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6afa65fd-e0dd-44fc-99f7-35490d6e9e41", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2810b9c6-e553-41b1-98c5-6b4b5a4573c4", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6afa65fd-e0dd-44fc-99f7-35490d6e9e41", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1c1ceb57-3181-4b56-b0a4-4ba9ed2dcad8", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6afa65fd-e0dd-44fc-99f7-35490d6e9e41", "target_ref": "indicator--559f775c-ada9-4214-aa2a-bbef6aa5d4a0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f72d919b-c768-4600-a563-603535484e42", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6afa65fd-e0dd-44fc-99f7-35490d6e9e41", "target_ref": "indicator--8ae06188-93ff-4a45-be6c-38087289a816" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3811b59-128e-4701-a6b3-723bf3e478a5", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6afa65fd-e0dd-44fc-99f7-35490d6e9e41", "target_ref": "indicator--679e97de-ee22-4cce-860d-3095ebc64c7b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7bc99c0d-dfc6-443d-a227-4992135b794f", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6afa65fd-e0dd-44fc-99f7-35490d6e9e41", "target_ref": "indicator--a0395017-7063-47ac-957e-80ece65b3056" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cd15ec29-739d-4ce6-ae88-2f3476a2720a", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6afa65fd-e0dd-44fc-99f7-35490d6e9e41", "target_ref": "indicator--d94bde35-6823-4364-871f-94c8786ca419" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--578a6197-c207-4655-91f0-67b98071a82c", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6afa65fd-e0dd-44fc-99f7-35490d6e9e41", "target_ref": "indicator--361b25ab-d920-4a6d-9246-764ca5721e35" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6a635014-94ea-4c4d-9aac-39d9ec4f50c8", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/css/art.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.377Z", "name": "URL: /css/art.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d94b9500-f20d-4a9c-9cb6-4d94b1fd275b", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6a635014-94ea-4c4d-9aac-39d9ec4f50c8", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e0a20b26-f13e-4723-b91d-63276967ac28", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--6a635014-94ea-4c4d-9aac-39d9ec4f50c8", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--05c9a78c-ce88-44e3-ac9c-cda8380852f0", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6a635014-94ea-4c4d-9aac-39d9ec4f50c8", "target_ref": "indicator--a0395017-7063-47ac-957e-80ece65b3056" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b11fd792-9433-4bbd-877e-cc74712a041e", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6a635014-94ea-4c4d-9aac-39d9ec4f50c8", "target_ref": "indicator--d94bde35-6823-4364-871f-94c8786ca419" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--83cf7782-1804-491f-b207-5301dec4e0e9", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6a635014-94ea-4c4d-9aac-39d9ec4f50c8", "target_ref": "indicator--361b25ab-d920-4a6d-9246-764ca5721e35" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47c53dac-f16e-4ffb-be14-92adc69dc532", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6a635014-94ea-4c4d-9aac-39d9ec4f50c8", "target_ref": "indicator--559f775c-ada9-4214-aa2a-bbef6aa5d4a0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1fa9c2e5-3f2f-43f9-8e26-59ee25fdd1ca", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6a635014-94ea-4c4d-9aac-39d9ec4f50c8", "target_ref": "indicator--8ae06188-93ff-4a45-be6c-38087289a816" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4a25c7f4-50b2-4d53-b730-ce8150f05e8e", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--6a635014-94ea-4c4d-9aac-39d9ec4f50c8", "target_ref": "indicator--679e97de-ee22-4cce-860d-3095ebc64c7b" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--455d5fcd-bd25-4328-a650-8b1eb44816fc", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/mail/js.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.377Z", "name": "URL: /mail/js.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--63e537dc-4375-400e-949b-87500d7dbe21", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--455d5fcd-bd25-4328-a650-8b1eb44816fc", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6b5de04b-2990-4dcb-8b35-36b2321038e9", "created": "2021-09-03T15:25:42.377Z", "modified": "2021-09-03T15:25:42.377Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--455d5fcd-bd25-4328-a650-8b1eb44816fc", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--44b863c8-93fc-4968-b7ef-914bdc85550e", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--455d5fcd-bd25-4328-a650-8b1eb44816fc", "target_ref": "indicator--76be25aa-e90b-45aa-8661-50bb74b126e5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--00a18abb-93a5-4514-bc3c-ac80cb935b62", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--455d5fcd-bd25-4328-a650-8b1eb44816fc", "target_ref": "indicator--f779084c-d990-412b-8fa7-b337b7520ea9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a46ea7dc-fcdf-4067-8e9b-1f9d8cddce0d", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--455d5fcd-bd25-4328-a650-8b1eb44816fc", "target_ref": "indicator--130b4eb2-ca05-4abf-9e7b-18e83224260a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--25ed3202-fc56-47ce-9da4-9dd7a40feb73", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--455d5fcd-bd25-4328-a650-8b1eb44816fc", "target_ref": "indicator--8cd0b069-db65-448e-9b60-db167106e671" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--05da1b8b-f793-46d0-9058-3e853f797f35", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--455d5fcd-bd25-4328-a650-8b1eb44816fc", "target_ref": "indicator--006dccd8-6cfa-4b29-a59b-21c5c300a39f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e62840b-c36f-48e6-abf3-66f7cfa3dff1", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--455d5fcd-bd25-4328-a650-8b1eb44816fc", "target_ref": "indicator--278e1001-80c1-4708-b0a2-64ce3000c5b8" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d90cbe60-838a-4497-b39b-abbc5ca7968e", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/mail/art.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.378Z", "name": "URL: /mail/art.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--24b7f4b1-e569-4f37-94c5-74fe1e48e92f", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--d90cbe60-838a-4497-b39b-abbc5ca7968e", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ea6a7eee-7cc4-45f4-b37e-4d24fc6a171a", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--d90cbe60-838a-4497-b39b-abbc5ca7968e", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--539d73eb-6ba2-4e63-b505-80db74e963a1", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d90cbe60-838a-4497-b39b-abbc5ca7968e", "target_ref": "indicator--76be25aa-e90b-45aa-8661-50bb74b126e5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2587c6f1-f7f2-4964-9f18-c12cdaac6a40", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d90cbe60-838a-4497-b39b-abbc5ca7968e", "target_ref": "indicator--f779084c-d990-412b-8fa7-b337b7520ea9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79786531-b69a-4af0-a2d0-692dd635f117", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d90cbe60-838a-4497-b39b-abbc5ca7968e", "target_ref": "indicator--130b4eb2-ca05-4abf-9e7b-18e83224260a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3de17ceb-3ac3-456a-b231-9e88a3823120", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d90cbe60-838a-4497-b39b-abbc5ca7968e", "target_ref": "indicator--8cd0b069-db65-448e-9b60-db167106e671" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47699c88-ab48-40c3-a4a1-29391a3da00d", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d90cbe60-838a-4497-b39b-abbc5ca7968e", "target_ref": "indicator--006dccd8-6cfa-4b29-a59b-21c5c300a39f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e60332ff-9317-4a06-936b-6022ff15b54e", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--d90cbe60-838a-4497-b39b-abbc5ca7968e", "target_ref": "indicator--278e1001-80c1-4708-b0a2-64ce3000c5b8" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--496ef844-83a2-481e-98e1-945de2c25630", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/jquery/js.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.378Z", "name": "URL: /jquery/js.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--896cbaa7-6b61-439d-a4aa-d661b3f10c90", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--496ef844-83a2-481e-98e1-945de2c25630", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3521f2ff-665c-4c50-af01-4406a760d1bc", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--496ef844-83a2-481e-98e1-945de2c25630", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5009901-88a3-49e1-9c1d-54f6660ac841", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--496ef844-83a2-481e-98e1-945de2c25630", "target_ref": "indicator--a4097930-94e1-4273-aaca-b9d9bbebd8ac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ad933406-d8e9-486d-be33-4c8777e47a0c", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--496ef844-83a2-481e-98e1-945de2c25630", "target_ref": "indicator--c03d33e4-2742-432c-9463-94bbc39d6208" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d2b49d8-c23f-4688-88e8-3654ec227919", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--496ef844-83a2-481e-98e1-945de2c25630", "target_ref": "indicator--b1e987ce-94af-4a20-aa4f-122ff9ca0035" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1481504c-0177-49f7-848e-ea5e0b069a98", "created": "2021-09-03T15:25:42.378Z", "modified": "2021-09-03T15:25:42.378Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/jquery/art.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.378Z", "name": "URL: /jquery/art.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0187baf5-eb31-4e38-9c7d-821d31874404", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--1481504c-0177-49f7-848e-ea5e0b069a98", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f162c56b-1026-4137-89f8-9496f2d3f966", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--1481504c-0177-49f7-848e-ea5e0b069a98", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01abe036-2638-47a8-8dbb-bdcee3d37729", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1481504c-0177-49f7-848e-ea5e0b069a98", "target_ref": "indicator--a4097930-94e1-4273-aaca-b9d9bbebd8ac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9acaffe2-61e0-4736-8986-a0d383e438f4", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1481504c-0177-49f7-848e-ea5e0b069a98", "target_ref": "indicator--c03d33e4-2742-432c-9463-94bbc39d6208" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a70253bd-8af9-4a07-a530-7b3e9b51053a", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1481504c-0177-49f7-848e-ea5e0b069a98", "target_ref": "indicator--b1e987ce-94af-4a20-aa4f-122ff9ca0035" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3f9ff89a-fc69-4f99-8912-e018993785df", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/crss/js.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.379Z", "name": "URL: /crss/js.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc701e14-7fd6-4f81-8528-3c9af2f115b8", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--3f9ff89a-fc69-4f99-8912-e018993785df", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0eaa620d-368c-4ddd-b1ae-369b5e2ac087", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--3f9ff89a-fc69-4f99-8912-e018993785df", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc60e23d-e1f2-41d2-a396-0338c65319f2", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--3f9ff89a-fc69-4f99-8912-e018993785df", "target_ref": "indicator--71dd59b8-f865-4090-a489-8c64ac420b53" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96e70560-6d82-47bd-a5d8-220b3dd2ffcc", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--3f9ff89a-fc69-4f99-8912-e018993785df", "target_ref": "indicator--764660ad-06e9-4541-83ab-b7d4b862e2b9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ea7b643d-7271-4446-bf39-0b2954c9b41c", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--3f9ff89a-fc69-4f99-8912-e018993785df", "target_ref": "indicator--6c797b87-276f-4a89-a12f-8b5e1a798d2a" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1d64cf93-dbc6-49dd-962c-e18a8ea03969", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "pattern": "[url:value = '/crss/art.asp']", "description": "SpecCom URL Path", "valid_from": "2021-09-03T15:25:42.379Z", "name": "URL: /crss/art.asp", "pattern_type": "stix" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--67625472-38b7-486c-aa3d-6a7c4f1e84b3", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--1d64cf93-dbc6-49dd-962c-e18a8ea03969", "target_ref": "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--44ee38ad-e436-44a0-a6f7-703e642fe6af", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "indicates", "source_ref": "indicator--1d64cf93-dbc6-49dd-962c-e18a8ea03969", "target_ref": "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ead8ff9f-636e-4928-a5ce-a08c62097fe7", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1d64cf93-dbc6-49dd-962c-e18a8ea03969", "target_ref": "indicator--71dd59b8-f865-4090-a489-8c64ac420b53" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3fcabfc7-099d-40a7-9ac7-d57d1b7639b6", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1d64cf93-dbc6-49dd-962c-e18a8ea03969", "target_ref": "indicator--764660ad-06e9-4541-83ab-b7d4b862e2b9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--208318bf-b7da-494b-ba34-79c93dd7b83b", "created": "2021-09-03T15:25:42.379Z", "modified": "2021-09-03T15:25:42.379Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "relationship_type": "derived-from", "source_ref": "indicator--1d64cf93-dbc6-49dd-962c-e18a8ea03969", "target_ref": "indicator--6c797b87-276f-4a89-a12f-8b5e1a798d2a" }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--94868c89-83c2-464b-929b-a1a8aa3c8487", "created": "2022-10-01T00:00:00.000Z", "modified": "2022-10-01T00:00:00.000Z", "name": "TLP:CLEAR", "extensions": { "extension-definition--60a3c5c5-0d10-413e-aab3-9e08dde9e88d": { "extension_type": "property-extension", "tlp_2_0" : "clear" } } }, { "type": "identity", "spec_version": "2.1", "id": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "created": "2021-05-20T12:00:00.000Z", "modified": "2021-05-20T12:00:00.000Z", "name": "NCSC", "contact_information": "https://ncsc.gov.uk/section/about-this-website/contact-us" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d1fcf083-a721-4223-aedf-bf8960798d62", "created": "2020-03-09T14:12:31.196Z", "modified": "2021-04-14T15:36:02.195Z", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "execution" } ], "description": "Adversaries may abuse the Windows command shell for execution. The Windows command shell ([cmd](https://attack.mitre.org/software/S0106)) is the primary command prompt on Windows systems. The Windows command prompt can be used to control almost any aspect of a system, with various permission levels required for different subsets of commands. \n\nBatch files (ex: .bat or .cmd) also provide the shell with a list of sequential commands to run, as well as normal scripting operations such as conditionals and loops. Common uses of batch files include long or repetitive tasks, or the need to run the same set of commands on multiple systems.\n\nAdversaries may leverage [cmd](https://attack.mitre.org/software/S0106) to execute various commands and payloads. Common uses include [cmd](https://attack.mitre.org/software/S0106) to execute a single command, or abusing [cmd](https://attack.mitre.org/software/S0106) interactively with input and output forwarded over a command and control channel.", "name": "Windows Command Shell", "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5", "object_marking_refs": [ "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168" ], "external_references": [ { "source_name": "mitre-attack", "external_id": "T1059.003", "url": "https://attack.mitre.org/techniques/T1059/003" } ], "x_mitre_platforms": [ "Windows" ], "x_mitre_data_sources": [ "Command: Command Execution", "Process: Process Creation" ], "x_mitre_detection": "Usage of the Windows command shell may be common on administrator, developer, or power user systems depending on job function. If scripting is restricted for normal users, then any attempt to enable scripts running on a system would be considered suspicious. If scripts are not commonly used on a system, but enabled, scripts running out of cycle from patching or other administrator functions are suspicious. Scripts should be captured from the file system when possible to determine their actions and intent.\n\nScripts are likely to perform actions with various effects on a system that may generate events, depending on the types of monitoring used. Monitor processes and command-line arguments for script execution and subsequent behavior. Actions may be related to network and system information Discovery, Collection, or other scriptable post-compromise behaviors and could be used as indicators of detection leading back to the source script.", "x_mitre_permissions_required": [ "User" ], "x_mitre_is_subtechnique": true, "x_mitre_version": "1.1", "x_killchain": "mitre-attack" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b3d682b6-98f2-4fb0-aa3b-b4df007ca70a", "created": "2017-05-31T21:30:32.662Z", "modified": "2021-04-24T13:19:18.594Z", "object_marking_refs": [ "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168" ], "external_references": [ { "source_name": "mitre-attack", "external_id": "T1027", "url": "https://attack.mitre.org/techniques/T1027" }, { "external_id": "CAPEC-267", "source_name": "capec", "url": "https://capec.mitre.org/data/definitions/267.html" }, { "url": "https://www.volexity.com/blog/2016/11/09/powerduke-post-election-spear-phishing-campaigns-targeting-think-tanks-and-ngos/", "description": "Adair, S.. (2016, November 9). PowerDuke: Widespread Post-Election Spear Phishing Campaigns Targeting Think Tanks and NGOs. Retrieved January 11, 2017.", "source_name": "Volexity PowerDuke November 2016" }, { "url": "https://www.welivesecurity.com/2013/04/26/linuxcdorked-new-apache-backdoor-in-the-wild-serves-blackhole/", "description": "Pierre-Marc Bureau. (2013, April 26). Linux/Cdorked.A: New Apache backdoor being used in the wild to serve Blackhole. Retrieved September 10, 2017.", "source_name": "Linux/Cdorked.A We Live Security Analysis" }, { "url": "https://www.carbonblack.com/2016/09/23/security-advisory-variants-well-known-adware-families-discovered-include-sophisticated-obfuscation-techniques-previously-associated-nation-state-attacks/", "description": "Tedesco, B. (2016, September 23). Security Alert Summary. Retrieved February 12, 2018.", "source_name": "Carbon Black Obfuscation Sept 2016" }, { "url": "https://www.fireeye.com/blog/threat-research/2017/06/obfuscation-in-the-wild.html", "description": "Bohannon, D. & Carr N. (2017, June 30). Obfuscation in the Wild: Targeted Attackers Lead the Way in Evasion Techniques. Retrieved February 12, 2018.", "source_name": "FireEye Obfuscation June 2017" }, { "url": "https://www.fireeye.com/content/dam/fireeye-www/blog/pdfs/revoke-obfuscation-report.pdf", "description": "Bohannon, D. & Holmes, L. (2017, July 27). Revoke-Obfuscation: PowerShell Obfuscation Detection Using Science. Retrieved February 12, 2018.", "source_name": "FireEye Revoke-Obfuscation July 2017" }, { "url": "https://researchcenter.paloaltonetworks.com/2017/03/unit42-pulling-back-the-curtains-on-encodedcommand-powershell-attacks/", "description": "White, J. (2017, March 10). Pulling Back the Curtains on EncodedCommand PowerShell Attacks. Retrieved February 12, 2018.", "source_name": "PaloAlto EncodedCommand March 2017" }, { "url": "https://github.com/danielbohannon/Revoke-Obfuscation", "description": "Bohannon, D. (2017, July 27). Revoke-Obfuscation. Retrieved February 12, 2018.", "source_name": "GitHub Revoke-Obfuscation" }, { "url": "https://github.com/itsreallynick/office-crackros", "description": "Carr, N. (2016, August 14). OfficeCrackros. Retrieved February 12, 2018.", "source_name": "GitHub Office-Crackros Aug 2016" } ], "description": "Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses. \n\nPayloads may be compressed, archived, or encrypted in order to avoid detection. These payloads may be used during Initial Access or later to mitigate detection. Sometimes a user's action may be required to open and [Deobfuscate/Decode Files or Information](https://attack.mitre.org/techniques/T1140) for [User Execution](https://attack.mitre.org/techniques/T1204). The user may also be required to input a password to open a password protected compressed/encrypted file that was provided by the adversary. (Citation: Volexity PowerDuke November 2016) Adversaries may also used compressed or archived scripts, such as JavaScript. \n\nPortions of files can also be encoded to hide the plain-text strings that would otherwise help defenders with discovery. (Citation: Linux/Cdorked.A We Live Security Analysis) Payloads may also be split into separate, seemingly benign files that only reveal malicious functionality when reassembled. (Citation: Carbon Black Obfuscation Sept 2016)\n\nAdversaries may also obfuscate commands executed from payloads or directly via a [Command and Scripting Interpreter](https://attack.mitre.org/techniques/T1059). Environment variables, aliases, characters, and other platform/language specific semantics can be used to evade signature based detections and application control mechanisms. (Citation: FireEye Obfuscation June 2017) (Citation: FireEye Revoke-Obfuscation July 2017)(Citation: PaloAlto EncodedCommand March 2017) ", "name": "Obfuscated Files or Information", "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "defense-evasion" } ], "x_mitre_is_subtechnique": false, "x_mitre_version": "1.1", "x_mitre_contributors": [ "Red Canary", "Christiaan Beek, @ChristiaanBeek" ], "x_mitre_data_sources": [ "File: File Content", "File: File Metadata", "File: File Creation", "Process: Process Creation", "Command: Command Execution", "Command: Command Execution" ], "x_mitre_defense_bypassed": [ "Host forensic analysis", "Signature-based detection", "Host intrusion prevention systems", "Application control", "Log analysis", "Application control by file name or path" ], "x_mitre_detection": "Detection of file obfuscation is difficult unless artifacts are left behind by the obfuscation process that are uniquely detectable with a signature. If detection of the obfuscation itself is not possible, it may be possible to detect the malicious activity that caused the obfuscated file (for example, the method that was used to write, read, or modify the file on the file system). \n\nFlag and analyze commands containing indicators of obfuscation and known suspicious syntax such as uninterpreted escape characters like '''^''' and '''\"'''. Windows' Sysmon and Event ID 4688 displays command-line arguments for processes. Deobfuscation tools can be used to detect these indicators in files/payloads. (Citation: GitHub Revoke-Obfuscation) (Citation: FireEye Revoke-Obfuscation July 2017) (Citation: GitHub Office-Crackros Aug 2016) \n\nObfuscation used in payloads for Initial Access can be detected at the network. Use network intrusion detection systems and email gateway filtering to identify compressed and encrypted attachments and scripts. Some email attachment detonation systems can open compressed and encrypted attachments. Payloads delivered over an encrypted connection from a website require encrypted network traffic inspection. \n\nThe first detection of a malicious tool may trigger an anti-virus or other security tool alert. Similar events may also occur at the boundary through network IDS, email scanning appliance, etc. The initial detection should be treated as an indication of a potentially more invasive intrusion. The alerting system should be thoroughly investigated beyond that initial alert for activity that was not detected. Adversaries may continue with an operation, assuming that individual events like an anti-virus detect will not be investigated or that an analyst will not be able to conclusively link that event to other activity occurring on the network. ", "x_mitre_platforms": [ "Linux", "macOS", "Windows" ], "x_killchain": "mitre-attack" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--df8b2a25-8bdf-4856-953c-a04372b1c161", "created": "2020-03-15T16:13:46.151Z", "modified": "2020-03-26T20:15:35.821Z", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "command-and-control" } ], "external_references": [ { "source_name": "mitre-attack", "external_id": "T1071.001", "url": "https://attack.mitre.org/techniques/T1071/001" }, { "url": "https://arxiv.org/ftp/arxiv/papers/1408/1408.1136.pdf", "description": "Gardiner, J., Cova, M., Nagaraja, S. (2014, February). Command & Control Understanding, Denying and Detecting. Retrieved April 20, 2016.", "source_name": "University of Birmingham C2" } ], "object_marking_refs": [ "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168" ], "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5", "name": "Web Protocols", "description": "Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server. \n\nProtocols such as HTTP and HTTPS that carry web traffic may be very common in environments. HTTP/S packets have many fields and headers in which data can be concealed. An adversary may abuse these protocols to communicate with systems under their control within a victim network while also mimicking normal, expected traffic. ", "x_mitre_version": "1.0", "x_mitre_is_subtechnique": true, "x_mitre_detection": "Analyze network data for uncommon data flows (e.g., a client sending significantly more data than it receives from a server). Processes utilizing the network that do not normally have network communication or have never been seen before are suspicious. Analyze packet contents to detect application layer protocols that do not follow the expected protocol standards regarding syntax, structure, or any other variable adversaries could leverage to conceal data.(Citation: University of Birmingham C2)\n\nMonitor for web traffic to/from known-bad or suspicious domains. ", "x_mitre_data_sources": [ "Network Traffic: Network Traffic Flow", "Network Traffic: Network Traffic Content" ], "x_mitre_platforms": [ "Linux", "macOS", "Windows" ], "x_killchain": "mitre-attack" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--04fd5427-79c7-44ea-ae13-11b24778ff1c", "created": "2020-03-14T23:36:52.095Z", "modified": "2020-03-14T23:36:52.095Z", "external_references": [ { "source_name": "mitre-attack", "external_id": "T1132.001", "url": "https://attack.mitre.org/techniques/T1132/001" }, { "url": "https://en.wikipedia.org/wiki/Binary-to-text_encoding", "description": "Wikipedia. (2016, December 26). Binary-to-text encoding. Retrieved March 1, 2017.", "source_name": "Wikipedia Binary-to-text Encoding" }, { "url": "https://en.wikipedia.org/wiki/Character_encoding", "description": "Wikipedia. (2017, February 19). Character Encoding. Retrieved March 1, 2017.", "source_name": "Wikipedia Character Encoding" }, { "url": "https://arxiv.org/ftp/arxiv/papers/1408/1408.1136.pdf", "description": "Gardiner, J., Cova, M., Nagaraja, S. (2014, February). Command & Control Understanding, Denying and Detecting. Retrieved April 20, 2016.", "source_name": "University of Birmingham C2" } ], "object_marking_refs": [ "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168" ], "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5", "name": "Standard Encoding", "description": "Adversaries may encode data with a standard data encoding system to make the content of command and control traffic more difficult to detect. Command and control (C2) information can be encoded using a standard data encoding system that adheres to existing protocol specifications. Common data encoding schemes include ASCII, Unicode, hexadecimal, Base64, and MIME.(Citation: Wikipedia Binary-to-text Encoding) (Citation: Wikipedia Character Encoding) Some data encoding systems may also result in data compression, such as gzip.", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "command-and-control" } ], "x_mitre_version": "1.0", "x_mitre_is_subtechnique": true, "x_mitre_permissions_required": [ "User" ], "x_mitre_detection": "Analyze network data for uncommon data flows (e.g., a client sending significantly more data than it receives from a server). Processes utilizing the network that do not normally have network communication or have never been seen before are suspicious. Analyze packet contents to detect communications that do not follow the expected protocol behavior for the port that is being used.(Citation: University of Birmingham C2)", "x_mitre_data_sources": [ "Network Traffic: Network Traffic Content" ], "x_mitre_platforms": [ "Linux", "macOS", "Windows" ], "x_killchain": "mitre-attack" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ad255bfe-a9e6-4b52-a258-8d3462abe842", "created": "2017-05-31T21:30:18.931Z", "modified": "2020-03-15T00:40:27.670Z", "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5", "name": "Data Obfuscation", "description": "Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols. ", "external_references": [ { "source_name": "mitre-attack", "external_id": "T1001", "url": "https://attack.mitre.org/techniques/T1001" }, { "url": "https://arxiv.org/ftp/arxiv/papers/1408/1408.1136.pdf", "description": "Gardiner, J., Cova, M., Nagaraja, S. (2014, February). Command & Control Understanding, Denying and Detecting. Retrieved April 20, 2016.", "source_name": "University of Birmingham C2" } ], "object_marking_refs": [ "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168" ], "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "command-and-control" } ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Linux", "macOS", "Windows" ], "x_mitre_network_requirements": true, "x_mitre_detection": "Analyze network data for uncommon data flows (e.g., a client sending significantly more data than it receives from a server). Processes utilizing the network that do not normally have network communication or have never been seen before are suspicious. Analyze packet contents to detect communications that do not follow the expected protocol behavior for the port that is being used. (Citation: University of Birmingham C2)", "x_mitre_data_sources": [ "Network Traffic: Network Traffic Content" ], "x_mitre_version": "1.1", "x_killchain": "mitre-attack" }, { "type": "report", "spec_version": "2.1", "id": "report--4e2d57e7-5166-4872-a1c4-059802425aaf", "created": "2021-09-03T15:25:42.380Z", "modified": "2021-09-03T15:25:42.380Z", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "created_by_ref": "identity--a2c0f893-512d-4dff-bd00-4e7c6f78fda4", "name": "Malware Analysis Report: SpecCom", "description": "SpecCom is a malicious 32-bit Windows executable. Command and control (C2) is over HTTP with tasking within HTML comment tags. Tasking is Base64-encoded with multiple layers of XOR obfuscation. Capability includes uploading of data and execution of Windows commands.", "published": "2021-09-03T15:25:42.380Z", "external_references": [ { "source_name": "NCSC", "external_id": "NCSC/MAR/Spec-Com" } ], "report_types": [ "malware" ], "object_refs": [ "malware--a33c1b04-2b15-4997-ba70-01d7aa412d8f", "attack-pattern--9af552ff-bfb4-4e88-920d-3a13e6ad8f37", "relationship--220e6b3e-1673-46a9-9122-08b4e837b600", "relationship--74c6a48d-9a2d-4cb0-a7b0-0c1a3629be74", "attack-pattern--ee15b4f4-5ff9-4634-ba04-9b4246dc54f9", "relationship--08f95731-31cc-444c-91a4-55628e79921b", "relationship--0cc2a3b9-9af5-4d7c-8156-bbccebd4226c", "attack-pattern--ff1f05b1-b3b9-481a-9ef7-e3615410b3e3", "relationship--4d40f3ae-8031-4a69-9680-80dcac78d842", "relationship--b1c528de-d764-4f19-aaaa-512ae2610035", "attack-pattern--e5c90ca1-a6a8-4bad-a1d7-d44ada742bd0", "relationship--f7419b25-8d97-4769-a51b-6f99b78202ec", "relationship--9a983aec-33b5-416f-8a3f-a54bd922eec2", "attack-pattern--ff24ed18-7b12-46c1-abfc-95ebfe18a5bb", "relationship--f81b75d1-3a00-4e18-a831-843797bfc69a", "relationship--c25be610-ea3b-4e93-b0cf-ab2c9fed34fe", "indicator--954eec45-044c-4a62-984e-2eb1c75e8c59", "relationship--fdea36fc-ab33-4276-b1dc-f273dc2a9e79", "indicator--b295e3ab-5b3b-46d6-96db-987abbabbacb", "relationship--cdb19981-4f34-4e07-a727-678a36dce330", "indicator--168c49bf-2700-458f-8bbe-59560957715f", "relationship--3053bcec-8ef5-44ac-828c-beb26aee27eb", "indicator--81053428-6b53-4ed7-b214-4ee3a7348913", "relationship--5a73ffd9-67cd-485c-af3e-0aa554f46fcc", "indicator--f888f829-82ea-4b93-8032-f7338f70f9ba", "relationship--015f0a4a-bd38-47cd-b5cb-45691406fd25", "indicator--6a4234ad-d4b2-48eb-89de-d2619dedf52d", "relationship--e5c2586f-c399-41bc-9013-89272c4816e5", "indicator--5d5cfdb3-f463-439b-bb73-467aae7e9ceb", "relationship--ddbfd56a-b6de-4675-b1ee-a249cbeb5702", "indicator--efeb821d-f87c-4d52-a5b7-223c12c19297", "relationship--11e3e1f9-44ef-4e3b-8217-09b1a20692eb", "indicator--55057064-6e5a-4803-a3f9-d0bb5039be62", "relationship--9c70301d-c89b-4535-82a2-2b904dded70b", "indicator--533b0cb7-2de4-4dc5-9599-78314e9719a9", "relationship--3a2d75e1-f78b-49eb-87bb-89e66169998b", "indicator--0cdb0465-9978-40b6-b764-1bb15882aacd", "relationship--10eafd6f-452e-469f-8e60-64bb385e0ec1", "relationship--3cc54016-82f5-4e6d-bf45-8c466c65991f", "indicator--e5108e39-141f-49a7-b4fe-fee385e92318", "relationship--68bf2ffd-05bf-4047-b237-b501e3a2440b", "indicator--99448f65-d6a3-4b88-96dd-1dbac22215e4", "relationship--0f484d68-cc81-4d72-b1ac-d2e440f4c59f", "relationship--58c15235-298e-48cd-aacb-3526f486ba82", "indicator--225df225-a51d-4733-8f34-da317785dd6e", "relationship--3bf46672-56b3-4b40-b424-908994922baa", "relationship--f54f691b-247b-4443-9ca6-c90e4c25ee86", "relationship--0f7330f5-7c2f-4b0b-b83e-01eda71b336d", "relationship--7d5e216b-29e4-4e05-a9c7-bec6a8bedac8", "relationship--c055b2d6-e85c-4891-9d96-c28479f8d58e", "relationship--dd479e4e-6bcc-4292-91ad-e61cdbdabdb1", "relationship--8d0e2d21-15a1-4e7b-a944-be348a8efd49", "relationship--1d76ddc9-2126-4aba-ba93-cfd4c278ad07", "relationship--f02c3e35-1e9d-471c-93fc-da6b1ca3b9a0", "relationship--a6825ac9-9a18-4162-8096-3c19e9cd96c0", "relationship--1ee4a96b-65e4-47cf-b0f6-1c998287717d", "relationship--fe36d613-2b85-47a9-91e0-8d75c383abd5", "relationship--1a709c92-e33e-48e9-bc6e-caed1703390b", "relationship--ccaea0d7-bcc8-40cc-965e-c38b67b4ac63", "relationship--71ca153e-2a9e-45f9-bf84-73be625dec34", "relationship--35bc4d69-6f44-43a3-ae36-bb244dd148b8", "relationship--96d428be-0eb3-499d-b2f5-cc87b108e4df", "relationship--00e99345-c069-4349-b19d-b1e58f67af23", "relationship--e7bda8bd-de68-4cd6-bee2-358f463c8496", "relationship--f1cf7fcf-6297-40b7-95f2-077b97e67718", "relationship--1d7eb5eb-042d-43a0-b6ba-855217ce0811", "relationship--f022c8c5-1c72-4fa9-b697-e4d4927b0ce0", "relationship--f4fe118c-a1f2-46e0-b5a8-43d11f188974", "relationship--2e1be09d-e4b9-438a-979f-b40999014184", "relationship--75e39a31-245a-4ed0-8b3c-97e8d6ba2506", "relationship--d359d355-3398-4165-a0de-9c8bbdd07fb0", "relationship--edfa44b0-1847-4716-8888-d62629089f56", "relationship--f33b9a40-dba4-4543-9b6f-7ee3fbe21efb", "relationship--4521b437-6ad3-41c9-8efd-b8a9e5571b26", "relationship--a761d12e-0f2d-44c4-8226-0aaa5ef736db", "relationship--13af6c06-9296-4689-9e6b-edc089f2ecf0", "relationship--42f04dbf-01e1-43db-8f4a-e676a1258363", "relationship--0d5baf83-52b0-4aab-ad16-da830eb83083", "relationship--3ca02e50-57fa-4d6f-a6ac-2114644847c5", "relationship--d213f5ad-4753-48e0-8879-347679849ef8", "relationship--0218ddd6-f255-4123-a90f-98d63e52a84f", "relationship--7c4abdcb-8ca1-4363-b842-1ed7fa1f102c", "relationship--ea6e11d9-911a-4691-bfcf-72507cbe03c8", "relationship--bffd7738-e7d7-4784-b56e-474333287bb2", "relationship--2e758c87-be26-424e-b0cd-ae775ed2af8e", "relationship--4526de51-b7d5-450d-b812-78d3a26af076", "relationship--0fb5b947-580d-4022-bdab-c04a76fd632c", "relationship--b3a39d39-a292-4d92-9851-a2e7b39e54bb", "relationship--585c022f-1d94-4856-bb1c-4d1f7595a398", "relationship--3c669b0f-a9ec-4eb0-bbd5-9dada98689cb", "relationship--b5b1a4e7-eab8-4ba7-adc7-6ae2c380c8f2", "relationship--3bbe5663-91fd-4a09-a4f4-e62477a4adc5", "relationship--e38b7984-6061-4b06-ad10-a040690cecb0", "relationship--74a6c4d9-72d7-4f19-ac2c-e645c390c86e", "relationship--66742ca1-13d4-44a8-bdbd-ad50d8d4578c", "relationship--7673c240-7ab9-42d3-9c7b-021b6f0dcfbd", "relationship--3302c9bd-a361-41f1-96d9-83ea548b4a27", "relationship--53de888b-ea98-4a13-8ac9-d4abb99797b2", "relationship--9a82a5c6-9ee5-4a79-a2f4-aefaed57e719", "relationship--ec2574cb-b252-470a-ae92-79094d0782c7", "relationship--f374e36b-54ea-4a24-9bf3-58461faf365a", "relationship--c23f3716-5e21-4fc2-8e47-dba431d6b82c", "relationship--d800ad89-6880-4646-ac48-f67b6a42b468", "relationship--62484ddf-c3eb-4b1a-b986-cc33853cf4f3", "relationship--092259e1-5f96-44c5-ba29-0970666fe248", "relationship--636511b7-61cb-4710-9919-c9b37e6e8f14", "relationship--f51c56aa-38cb-4948-aade-cacc8267e42d", "relationship--6a3a128d-d3ee-42a7-9c03-0b559fc7a835", "relationship--ca9a443a-ffe4-4e5b-a870-811ba312d8d2", "relationship--2c20ce6e-16f1-46e4-90a4-22093c732254", "relationship--bf24612e-81e9-483d-857c-a7f8bd94d787", "relationship--c1b58456-9d03-4343-842f-3b2f61bb0188", "relationship--0c7c419c-4916-481b-bf57-68b85f575187", "relationship--23838cf3-c0a4-442d-9123-1223fda0ad4d", "relationship--659ce7ce-add6-47fb-945c-dc62683a4f4d", "relationship--384bedbe-9e22-43c4-81cd-c15f25fad6aa", "relationship--2ca0fabb-7bd8-4583-a040-f3bea704cacc", "relationship--dcc145a7-0cd9-47da-a0f6-8cf1736afc39", "relationship--0a5fb1d9-9cec-43f3-9f1a-e77c5139bf8d", "relationship--0fe46d05-8ff2-4f7a-bb7b-725318cd96cb", "relationship--f1027043-1664-4ed9-af6b-77ba2e42afca", "relationship--c7fe5c09-e21c-4c95-8bdb-df33953126a6", "relationship--758d88ee-5a1f-4a48-b2da-682c150cf938", "relationship--9edd9e24-5a4e-4526-9a0d-fd8a4da70528", "relationship--e805e373-50fa-4d71-9dc5-c3a809844bc6", "relationship--7526b707-5ba2-4c30-93df-847a2885b5ff", "relationship--512143e9-571d-4743-b6c2-1408fb585378", "relationship--c1ef317a-9fa0-4d9e-9f16-3dbe359927e6", "relationship--a5435c1d-64e1-4ad4-bceb-848df689c008", "relationship--a270ee40-c539-4a53-95ce-715bb60288e1", "relationship--09a3c138-2699-447e-b0e3-f4c4718c1af1", "relationship--eab113b8-53ed-4df0-b360-8c202f91fa34", "relationship--fe6d9747-1965-461a-887e-52ac5a4e82ed", "relationship--33f2dc0d-1c18-4a61-b24d-33db3c54d6b8", "relationship--6beaa4c0-3bc3-47e0-bf70-33179f824323", "relationship--ace46fb7-e913-45f3-ba78-b38a6dd5956a", "relationship--1aea8a68-f450-4138-9cc2-69995b78faa7", "relationship--29019c32-7b3f-4938-9e42-9acefe544420", "relationship--26f467ec-8b27-4193-bcc6-45885c654e30", "relationship--fa466b73-f307-483d-aa33-5b894646ff3b", "relationship--ec3de4b8-b65f-48c9-994c-27a7caee8240", "relationship--d8fb6865-47bc-4d84-9fcc-e7558873f5bc", "relationship--016d6927-5792-48d9-a3aa-39f65e562c52", "relationship--d6a793a5-73a2-4f7c-8b08-dda99c6b2fa1", "relationship--01e2afa0-a689-4a6b-abae-372d5738ed05", "relationship--85a53081-f865-4a41-b774-2fa6ea77460f", "relationship--056a59d9-1540-464c-835c-8310951e62ca", "relationship--f0c2c558-da96-45a1-b182-601e5beb7ff0", "relationship--76115475-6b72-4da9-8d30-37cee86bcf82", "relationship--4d34e4ef-e239-442b-bb6e-c27f1afc52c3", "relationship--d8eda4db-9d9a-4732-9ac9-91b7cd20802e", "relationship--5dfa12d1-29e0-4653-9e72-440abec14b40", "relationship--845da4c6-0bd7-407a-8948-2cea66df547b", "relationship--06bc4147-6d88-4df6-b0c9-5ab65d49af16", "relationship--c4e3173f-e3c2-4b53-8979-91e5a0d0a453", "relationship--6ba6740b-e582-4ac8-a2ab-df3f546a5907", "relationship--1b7c66d1-43f8-4ddc-8254-a2ef62adc5ad", "relationship--7838bf6e-90dc-4b69-bbd4-992ea2b47aae", "relationship--72a4b99a-c656-4596-b31b-5f03c5a2baaf", "relationship--06fc3451-80a6-4a82-bd1d-def073dc28bd", "relationship--4a0b6873-e833-4f35-9b3d-001f176498c5", "relationship--281c1086-2af7-4959-bbe9-c60f449d3e79", "relationship--181debf1-edd5-4e0d-a47a-400165f73be1", "relationship--1a94af0a-8c54-4618-8cc8-f544a59921ad", "relationship--51f6ed7e-cc26-43d7-883d-656c33698bd5", "relationship--564c401d-9adc-4439-b66b-de0e385a4109", "relationship--0272172a-366d-490a-aee9-e6a58887b275", "relationship--e89cdc94-7502-43a4-8e66-fdc8e56c0f9d", "relationship--a3413b48-3e42-4cd4-bb9a-55c195efb3bb", "relationship--1284b8ea-d772-4296-a7d7-8311cc6c2155", "relationship--045c6688-9f87-4403-918e-06d93c6f772c", "relationship--7ee4210a-403c-4816-b045-d2fb75f0591f", "relationship--4f8cb713-48f4-486e-a0b1-36e446e0818b", "relationship--d35613b3-c87a-4712-915d-5c827d0049d7", "relationship--bf2c7b30-babb-41d0-8cf7-5174c4c882aa", "relationship--cfcfcd33-5a0c-46b3-b96c-c8a931de5877", "relationship--f59d4478-ce00-4d70-be97-b6ea174c5b7a", "relationship--49a8fd39-fc7f-4e38-b694-85229dd62435", "relationship--60c83e4e-9ae6-4538-9d32-5cd5feb86ad0", "relationship--cf4d7019-3978-475c-a3cc-33485cba864c", "relationship--9edf15d6-1e12-4a4b-a879-6087215d9740", "relationship--02f4e0a7-621c-41a8-9f28-eefd5e0b078f", "relationship--006a6fa7-2442-4538-b088-4dc360e4dd99", "relationship--d45c0fca-48dd-44b3-bd0f-ce8c7bd00c0f", "relationship--782838e4-5413-4b19-b1d4-a8c4dc313754", "relationship--498bce39-506c-4589-a010-ce8c8a3ae06f", "relationship--9b46264d-808b-424b-bd1a-dfb8e3170221", "relationship--1b8560b7-a3dc-4006-9293-612fffd63649", "relationship--ad9f0446-8324-4fed-9b18-34e22faedb03", "relationship--bc1a2a0a-09ab-4c88-ab7f-3ce184ebeca6", "relationship--5aaf36e7-bcd5-453c-be4e-279a461f4dac", "relationship--c1b367a1-6a57-47be-b817-b2e847bcac86", "relationship--dbb0734d-099d-447f-bec2-6fbfdb6f71e3", "relationship--9e200e98-e94b-45e7-9bc9-f7030e4ff39f", "relationship--dd1a1c37-61ea-42ab-823f-d58a1661bd98", "relationship--53b87420-56f4-444f-9f1b-7f3f9f2272a9", "relationship--fb654455-299a-4580-9b7e-f0059d6c80a2", "relationship--83c8805e-2002-4a2d-b513-bd887924342c", "relationship--e08f77d7-c955-4c5f-b2f2-7b686ab45e35", "relationship--f98ec767-d2a2-4386-9800-c6ed357ac084", "relationship--a9cc7b8c-493e-4061-8492-bcfadcbc37e2", "relationship--0b287cfd-c9a5-48b0-a45b-4c9250f8d1be", "relationship--2f623bc2-413b-42f9-89e8-559a84bcdf69", "relationship--54d67d43-3eaa-4a7a-bec5-86efb8b6273a", "relationship--58202529-a694-4e83-9058-1b3311ea02e7", "relationship--053835a1-80ab-426a-bd4e-103c1fbc588c", "relationship--82959068-17ed-4763-8b72-91853e3cbc93", "relationship--62ac26b2-eb6f-4994-a4ee-c976b250ea65", "relationship--7a083bd2-42b8-48b5-88f0-739f5da09f2d", "relationship--572882e6-c72f-4568-a286-877bbce4f80a", "relationship--5aa862cc-5fda-4edf-b3bd-6da4cac570dc", "relationship--18e88769-bcde-456f-988b-80e70d0dab3e", "relationship--b2097b37-d811-4766-89b1-40ba282636a1", "relationship--261eead1-3cc3-45db-b88d-8ccab9e10324", "relationship--501f8497-587e-4c6c-b1cf-b35ad4a30a53", "relationship--36653c9f-381f-44a9-9cb5-4ccd54d620c1", "relationship--4091a93f-ae85-45d0-b52b-bf0fc42f859a", "relationship--ac0c340f-d5ee-48d8-8134-6c189ab50554", "relationship--a9cc2dd7-67cc-464c-bf05-b30d957ca53e", "relationship--354a93b1-9464-4ba4-b5ae-ba1a9f3dc5c2", "relationship--fb6d378d-c7c7-415d-9719-4440448f6ba5", "relationship--54ee9701-5f21-42ea-bbb6-cd6987b07298", "relationship--a8375c7a-12c9-4253-a245-e90dde31ac2b", "relationship--8cb72d4b-2223-4d95-8ad9-35b62cbe2f76", "relationship--3cb762fa-0dc5-4435-bf77-a2b0a8d4a5cc", "relationship--82cc8387-13e0-413e-93a6-275bb30b1ae6", "relationship--47390c1e-04e9-4795-a48f-f7b9bcffda68", "relationship--25546167-64c8-46ee-947b-ae803068ea83", "relationship--ef01f210-ee31-4fc5-a71f-e1844c8e6a60", "relationship--c223cd11-ef8a-4b15-8fc2-934c96e02480", "relationship--c08ddc6d-664a-4e0b-8d76-b9cfcc299775", "relationship--0571b7a7-1093-4911-b13e-946a27b443cc", "relationship--d72e8581-4628-4abf-98a7-d817b65f2234", "relationship--27cb20f5-58f4-4a21-a9e0-4f8d969e5b2e", "relationship--d9c6929c-028b-4a6a-b783-37131f5f9d10", "relationship--c788c351-bf90-439a-9b65-be40382aa6c5", "relationship--ba80103c-e629-4384-b7dc-8c72e44f3db3", "relationship--1b6d585f-88c1-41d8-b58d-f26a65ff9a53", "relationship--4237c9ad-9362-4af4-b53b-7b062b71b5e5", "relationship--ba79fa8e-ee73-4151-aba4-17184d0a535a", "relationship--d896fc5e-9a7b-42bf-ab1d-9d60214d1a6a", "relationship--cce82995-3753-4c2c-a60b-995180272b6c", "relationship--d1cf51f1-2eb6-49e4-9048-6bec51643c73", "relationship--1c09d003-8c6f-4abf-829a-aa19727ba95c", "relationship--3adbb379-b9e7-4824-9117-3dfc4550d771", "relationship--afcc051f-ecf6-4981-ae33-1cf108182c5b", "relationship--7dafac17-62ae-49ca-80ab-d2e0a5ef5474", "relationship--3d3c2472-381e-4d23-8ffd-13094e1747a6", "relationship--c77e1305-a30e-4380-ae58-0f81591119b3", "relationship--c7343198-9475-41eb-b0cf-b30c83ce3161", "relationship--b0d4faa9-3c45-45a9-afcc-a058d40b2e1a", "relationship--e06427d4-32af-4a3d-bf8c-85d54ac9889a", "relationship--fef900a3-e7aa-4310-9851-67f29ef73f48", "relationship--a5667eb0-cf08-400d-b503-f1f14852adc3", "relationship--a79a907f-dde2-45fd-82d8-c7cacbd6ed6b", "relationship--8566249e-aabf-4b9c-a6cf-8b14dc5df775", "relationship--cc37433d-6d40-4d2f-ac3d-fa2176d1bf12", "relationship--7bc4509c-47ea-472b-8874-fa5940f7d66f", "relationship--377fdbf7-4de0-4e7d-974a-a2526dd493cb", "relationship--60357d77-76c0-4615-9a02-b896d2371b74", "relationship--d65af7cb-4f5f-4deb-a984-06678d4a4980", "relationship--668a002a-eb8d-4fd4-b917-c32bed758717", "relationship--ae843a5c-e71a-46a5-ab78-c7b49cb761fe", "relationship--36f97824-67f0-42b8-adcb-7b297e892ddf", "relationship--04fdbd73-a1c3-4a85-96fc-03f6adad0e99", "relationship--879ee26e-6131-4631-b217-3721b8801e21", "relationship--a1170f8d-9ba5-4433-be65-3f4881199d7d", "relationship--a3797d1c-12d8-4afa-adde-cf2fb0424313", "relationship--9d8e6a71-5f1d-43bc-abce-adab9709496c", "relationship--441891ae-0314-4dbb-bf18-a03f946e3bef", "relationship--8bacd667-acc8-4713-a787-377511794317", "relationship--6f10cfe3-e86a-4a74-93c6-b42f5d4452f3", "relationship--83c6c39c-02ba-446a-abb7-0c35a6e9bfc0", "relationship--8e4e87e1-57fd-4696-bf41-0a05fa7630d3", "relationship--b58b4618-2eb0-42e6-976b-a1dbe37b9bd8", "relationship--fc641d90-94e4-4dbc-9af5-8300079250b0", "relationship--09ed349a-4cb6-4a09-b4cb-2d8063afd619", "relationship--6bab9008-3b69-4736-8f47-e9a83be103de", "relationship--6bc77bb0-fdcc-499b-8927-ed9f826236a3", "relationship--e7e5c151-0eb0-48b5-b112-1fb8e30dd76a", "relationship--1f5e37e7-1a9f-42a7-83ef-c61bb04bc818", "relationship--e3d51d99-6931-4458-bb7e-211245772bc3", "relationship--748cd2d2-1457-456f-bc0e-c17a4203f19a", "relationship--8185c5f3-b92e-4f9a-a094-33b02b40b821", "relationship--bf4f173c-3fe1-411e-85de-f58f0017e5d3", "relationship--0c6581ab-780b-4d9a-aa28-436729da54cb", "relationship--0e61aac6-9480-4dcb-8e5e-0c3d4f932d9c", "relationship--3c072c44-1362-46c8-9df4-b97739e0b161", "relationship--0b5d782e-12a0-4775-b4b2-8d13afbb75f1", "relationship--f08f0d91-d0d4-4221-997e-d12dcc2c5bc8", "relationship--a9447af2-c8ea-4034-bf4d-7bb625394258", "relationship--fd07d6fd-b95e-4029-91dd-74fea6075261", "relationship--3d755e2f-2426-4ace-b74d-869d32fd5fc7", "relationship--7b0bf445-128c-4c52-8145-97c1f0b84915", "relationship--9200b9c1-a51b-4513-92c4-aafb1d849b97", "relationship--b8674710-5c4f-4360-8a40-60081dea8950", "relationship--ea2714af-b73d-4806-a49d-563e1da70c04", "relationship--63d6c26e-b113-4308-a6af-bb57deee9083", "relationship--89141a6b-62ee-4534-94fc-087d42089d31", "relationship--569b22dd-7ae8-45e6-abc8-7e225e5c5547", "relationship--2c4ad371-3c3f-49cb-9239-975fac674d7b", "relationship--ddd7b34e-30c4-47b3-860a-6a0be5d8d04f", "relationship--3355a0a7-54c1-4ea8-b676-3756441aa878", "relationship--ee64a162-ec2c-488a-ab27-ba94d3a6306b", "relationship--f0e966a2-dbf3-410f-ba23-212a0649d916", "relationship--b765a188-e353-4f5b-9ee9-4eac561a157a", "relationship--a23d9919-68e5-4aef-99e1-400702870469", "relationship--67b1179c-d191-4646-87f6-7130938fe8c1", "relationship--139ced96-7e72-4697-b885-920fba203d37", "relationship--9501cff8-bce4-46ec-96b4-36baa8a3bf86", "relationship--705ac326-21f1-4168-9390-9f37d24b7fd1", "relationship--20146565-e282-4843-8cc6-b2b2a5bfc338", "relationship--811357b6-f1bb-4473-8a63-695d1c34f7ea", "relationship--461e6af4-dee5-46ba-ba0e-e45ab235c488", "relationship--5ea0f3f2-a9f8-4dde-b8db-b8cf4452bada", "relationship--e7a5230e-73b6-4f9a-acad-7d02516be215", "relationship--29dcff45-c87e-4c47-8d61-1827bc9930ee", "relationship--63ce2df1-e113-445f-bf1f-93b77c1b10c6", "relationship--de6267a8-4c97-4ea2-9918-7a228cbb90ff", "relationship--ddd0f2d1-b166-4ded-8b60-2c32efface4f", "relationship--1f90a234-4389-4d17-a2d3-1dd7dd3e5508", "relationship--8c3d7d1d-5d76-4fa2-8084-2c0933d059a9", "relationship--4be6031e-12cd-4ace-b567-4706a12fb5ee", "relationship--19caa093-4893-457a-a031-6dcc8665a765", "relationship--08722d37-ecaa-4590-babb-0f7b5ccfd6a0", "relationship--bd6ac375-eb9d-47ba-bc43-03cabb47a274", "relationship--004aa869-598e-4768-b677-653f75d853b6", "relationship--c7236bcc-da49-487d-9ea6-f549f1f6d774", "relationship--bcf5e5aa-8519-4b9a-9451-06293fbfc480", "indicator--2c569091-1aad-408c-8200-56db1a4e2473", "relationship--218193b6-9cea-4c70-a3f1-3ab694f7a3cb", "indicator--91d85877-8065-4a11-81d5-e4f1bc9db385", "relationship--de4b9eff-d02b-4cde-b880-1590e9b15583", "indicator--22a405d6-4699-4af8-bcaf-79fcba6bea55", "relationship--c2b21f64-a5b9-41b7-8181-74ce0a9c1e46", "indicator--81e370e0-c1ca-4c2e-891f-900fe254996d", "relationship--ee5d03cd-ebf8-4aad-a14c-80f6fedec5d4", "indicator--f2d21f4d-1f63-4a9b-a5fb-2bb19bf8d106", "relationship--0793e223-8e3d-472b-829d-83faf02aca0b", "indicator--303468cf-ec83-4297-8934-0f7c1a7cddae", "relationship--d853b701-48e1-46f7-a1f0-b3ef04592c3b", "indicator--daf9dfe5-42e1-455c-9782-b4ae201d064a", "relationship--3ce2876a-23e5-42af-a8d4-ad48f194cdce", "indicator--54ceb17b-2713-4015-84c1-c5aefb62aa0c", "relationship--38ff0d8b-af33-472d-b5a8-7a54dd6c382b", "indicator--f7ca8982-e058-4bdd-abc3-e1ace5944d0e", "relationship--5579c7e5-7161-4acd-a7f8-62d31d0ae46a", "indicator--b859d1e3-7e2d-4c54-b8e7-36428190a238", "relationship--bb8d53e3-0ab0-4dc4-a0a9-0ae780b23dbb", "indicator--7fe31ba6-462c-4e6e-afc6-61aa595d22a5", "relationship--f8cbc1bc-02b0-4e7b-93b7-2456a400aaff", "indicator--337e2e7c-f259-426e-abe4-3ec2960385dd", "relationship--a6d06c10-28b9-4b73-9f81-927b366f59e3", "indicator--3bdc2323-dc7e-472e-864a-730d97035264", "relationship--a7b4b762-9dd2-4d97-afa6-6019c9faf905", "indicator--9d69c06a-0d35-4dd5-9d91-5ffe2d1bae65", "relationship--0b4ad356-b4b4-407f-aded-668df3b68d7d", "indicator--5bb109f9-1208-420b-b23f-988b3d8e7d9d", "relationship--568650d1-dc48-439f-8a51-dc043a126226", "indicator--7c6c82b8-d50e-4275-8d40-7231e7388385", "relationship--f435e9a9-c56f-4e3c-a3fb-65c0a1c42dac", "indicator--661e198a-dfc1-4915-90d2-d7cc4722b92f", "relationship--0dcc86cc-1aad-4449-9cbb-1bb971a3fa23", "indicator--9d5aad6f-3625-4fc4-9d9e-7d0c6e59a0f7", "relationship--38e40101-552b-4e1c-98a6-65d83283772e", "indicator--3f00a455-93e3-4a5a-96d1-cf326c0d15aa", "relationship--94ae6cef-5125-46ae-9b62-109a759b9409", "indicator--20c74caf-0094-410e-a6a2-e5a5a53bc1f3", "relationship--d9a5d037-197c-421f-9fb0-51bb4a0c2911", "indicator--6c731b78-d08a-4da5-8d82-837035a4f9f5", "relationship--7feeab4d-3938-4211-9f23-dc1cc1817d28", "indicator--1b23b0f1-f289-4e4e-9d1a-a893400cc0da", "relationship--97330ebb-bac0-4e0a-8bed-fc3c0ef4b559", "indicator--fd319899-a1e1-4d82-9ec4-624c34f81db2", "relationship--8a7f2184-f8f6-42a5-b0b2-201e30065992", "indicator--fca6bfba-3b9a-4bc8-b8c9-a573a2987aa3", "relationship--c44633c9-ef13-4c8a-84ac-f257feca1a46", "indicator--2f5504f2-a62b-469a-8850-29ac9b831f78", "relationship--2e8da287-4f1e-4d33-b7b3-90239e542ad7", "indicator--e3faf8e8-84be-4904-9f78-43a0577807da", "relationship--ff3cb2d9-62a5-4409-9d18-7e98e7d08d6e", "indicator--12abfb3c-89d8-4751-bc8c-4fe10c376dd7", "relationship--cadde65f-0ef7-4f1d-9d63-29f53a57ff0f", "indicator--b01bf8e2-af1f-40a3-a91d-7405aeac0fe9", "relationship--e2ce2fc2-51c0-4fb3-bdfd-90bc697daefe", "indicator--dd67eb53-f9af-4931-904e-7fa9f32f957c", "relationship--0e01955a-cf84-4989-96a5-a99f1bf47f67", "indicator--8c405500-14a9-4a16-98b4-3663bf7b2b1c", "relationship--7aee2208-e38b-4797-a86a-e66b1efe0744", "indicator--1e9a0ecc-2d71-4f93-b971-18af95ff2e9d", "relationship--26e96344-0f0b-498f-b6c7-d1ddbb685ef9", "indicator--745bf2b7-8c3d-4f81-b685-9476cde9a9e2", "relationship--db5c988b-3e11-4a3e-8739-c26e942e63cb", "indicator--2c479d4a-7d3c-4216-8637-ea18bfd7acca", "relationship--7df845d0-8195-44d0-8675-5b14085c88d0", "indicator--b69e2980-9cb6-42e4-b761-ccf9a72743c9", "relationship--a3dc774d-7091-4863-9af7-7cb85c891a40", "indicator--9963d2db-63d5-4be4-98a6-80cf9eab6e93", "relationship--183fdfeb-56df-4c36-b5ee-8bb7d374880b", "indicator--a6bef973-0eb2-42b9-aeb7-9dadf04c5cbd", "relationship--ebc0f0c0-03ef-45c2-be10-5ec45d2cc1ff", "indicator--b38b5856-89d0-40d2-a738-c4c10bc743ba", "relationship--a46cc32f-1a96-4e5d-b79b-177a564e4716", "indicator--289fa967-5299-49d2-bfea-d0f87686b94a", "relationship--8507e7f4-30da-494b-a2d6-9fb362aea008", "indicator--cc454800-1716-4e0f-9c70-a88c16bbcaac", "relationship--0bb0c594-8369-4584-b162-32bc02046a9d", "indicator--775698f0-823f-4097-ab3f-e5f5bb2a2dad", "relationship--f41be338-b667-4cce-9f96-df910ae41d8d", "indicator--6a7777fc-fcf1-42a8-bb3d-0d5b5bae5bee", "relationship--17b3600b-1940-4692-91e8-a56924f5b524", "indicator--4e41c7f0-1e95-4377-8af4-1194adf149df", "relationship--180b0bad-7c5c-4f05-be1f-c5f092fb25e8", "indicator--6525da31-9ed9-452e-8a04-c6ec637193d1", "relationship--ee6c0f7e-470c-4f62-90d7-ccb06f95bba7", "indicator--9e976387-d505-4a49-be59-ed61ef6b2b35", "relationship--ba3cc42d-c2db-4ccd-83fb-220c8fd74284", "indicator--3efee39a-b44f-4b5b-a0b7-81bc315c59eb", "relationship--17f23c9c-a179-4b03-82e4-3049cba2417d", "indicator--fb71a02f-95fb-414e-adee-c9020dcad5d2", "relationship--65a41a15-a28e-4112-9514-115320ba4899", "indicator--c0951c81-2124-49b9-af1f-be31748abd7f", "relationship--5d5b28fa-451f-45e6-bbbc-08b6e079f620", "indicator--627af53b-68be-412b-8168-7ecf0469ccd4", "relationship--b4aefa59-23a6-4ded-9729-fc7ae86bb7a6", "indicator--8ebce1f6-0445-4807-858e-3d52dc0541c1", "relationship--654e5e50-2d7d-4095-aad3-fd478864e809", "indicator--42352416-115b-4d76-af2c-b4898bfb5611", "relationship--d97e18f3-3e57-4437-852f-0ede1e94cd86", "indicator--f1804e4b-4fc8-4e95-bbf3-cb990d607071", "relationship--8774aca0-3731-4eed-ae9e-433df12695ff", "indicator--5170e2e6-833d-4fce-a434-15eb3a5e0867", "relationship--7167f820-a2db-42c2-8a19-5212d0d264d0", "indicator--16a2b295-564d-4f6c-8815-d5ca336bca90", "relationship--ba185bbb-aeeb-49b1-84a9-e3229b113ef8", "indicator--7db30756-5877-4df5-9e28-a350f23a98f4", "relationship--93bb50c9-0035-4d76-95bb-bd3232994060", "indicator--d489006c-fbf6-4870-a562-f7a902dcaab9", "relationship--6b77b3a4-3770-4f8e-a4ce-5cf2453e699b", "indicator--bde7895f-75d9-4707-a581-c338c54b7c49", "relationship--158ac59a-1726-45ff-a318-2e662580625e", "indicator--2443a0e6-3efb-4b7d-8615-19721e907871", "relationship--68935e51-b295-4304-90ac-e9808ac49639", "indicator--6042c3c8-11bc-4638-829d-b93c13f36a6d", "relationship--9cb010cb-6097-4d48-aac8-71bcbe8a62bb", "indicator--2607073d-ade7-4e9f-9f54-419dcafab37a", "relationship--945e8797-a407-437e-9b4d-90d43f6378be", "indicator--559f775c-ada9-4214-aa2a-bbef6aa5d4a0", "relationship--ecb36543-c841-4a35-b924-f596bc17b4c1", "indicator--8ae06188-93ff-4a45-be6c-38087289a816", "relationship--bf7ae297-9dd8-4779-92f1-260f04f39c5b", "indicator--679e97de-ee22-4cce-860d-3095ebc64c7b", "relationship--250df907-f118-47df-b474-0b47629d6e54", "indicator--f55e05d8-804d-44af-8ec1-32a4a9eb31d7", "relationship--6503e4b6-bbce-4142-9b78-17ef9a6c8064", "indicator--f475ad15-765d-4e90-aa5d-3042f47857a1", "relationship--37815ad6-1a77-49c2-a60c-65df5d5914fe", "indicator--ce293b5c-8816-4923-be3a-f40134a4e022", "relationship--04b02701-8f6a-4eb3-960c-aed054311f31", "indicator--244de742-9fc5-4784-b9c5-083133b094bb", "relationship--542ec9fc-a8a2-4960-bf90-0a18995674b9", "indicator--71dd59b8-f865-4090-a489-8c64ac420b53", "relationship--8fc9dc04-ca43-430c-9871-b54deb3b9777", "indicator--764660ad-06e9-4541-83ab-b7d4b862e2b9", "relationship--a82436bd-f8fb-4fdc-b720-2063352cefd3", "indicator--6c797b87-276f-4a89-a12f-8b5e1a798d2a", "relationship--43989c0b-ad82-4852-abe8-188521626bb5", "indicator--fc870802-12b1-471b-8d80-03a8a9eb65d9", "relationship--6253f156-6783-4771-9123-a8f1210e9c46", "indicator--71b931b2-9680-45a5-9e4d-13ab1a833e50", "relationship--bb4be851-5497-4dc0-bf12-38832e7c5610", "indicator--39515c04-89fd-4cc2-9dd0-107331d90850", "relationship--0ae557a8-1c85-4ae1-b5c2-5f0d3bc1b881", "indicator--8178ffae-a7a3-46a7-85ab-7baf4e9dbea3", "relationship--71464228-0319-492e-b0e0-aead2e2e3882", "indicator--02e50c7c-f882-4878-b777-fa7e50b9071e", "relationship--6350314b-74cc-4103-a7be-82f1368fba8a", "indicator--be27adea-c70d-478f-bc25-513bc30bb5d0", "relationship--2437135d-722b-4db4-8ad3-9c9297b7180f", "indicator--472c6111-5abb-4ca9-93da-9efdddbf098a", "relationship--b67caa36-94af-45f1-8705-6dec4adad8bb", "indicator--db538a27-eda1-4837-b1d5-3963fb903843", "relationship--0b7c9de4-3864-4912-bf0b-204f46a828d8", "indicator--d9c23180-b74e-4fd8-bd7f-aaf6eb501a48", "relationship--6efe2158-ee4e-418a-990c-f5d0746290d0", "indicator--5334a7ac-c157-4c91-91b6-35334f9f8e83", "relationship--096f4adf-e415-4082-9cc8-0f5088da9e66", "indicator--cebb8ff0-418a-4503-80e3-9fc926346e79", "relationship--0d031253-eeca-4f9f-8d34-fa20e5c15c51", "indicator--59f89497-bdba-46fe-bb86-6de9e9309b7f", "relationship--b072036f-d3d8-4d41-b7d1-c22cd46a0cfe", "indicator--3c82ae4b-671e-4c8a-aa40-a21adeae929f", "relationship--59a49412-6756-48dc-8503-c9811d3e1285", "indicator--c2926340-81f7-4a5c-8059-9f787132b3eb", "relationship--5cfba0cc-7a14-4e88-830b-ec0c0dd253ce", "indicator--5fc0fcaf-a1df-4357-8aff-765dcf22f06c", "relationship--ac913d7a-62e4-4985-9a1a-36391b6c1f5f", "indicator--a0395017-7063-47ac-957e-80ece65b3056", "relationship--ca2f606c-c1f4-4500-8eb1-33d7ae61b809", "indicator--d94bde35-6823-4364-871f-94c8786ca419", "relationship--56ba2582-5307-4852-a418-99e521cc706b", "indicator--361b25ab-d920-4a6d-9246-764ca5721e35", "relationship--9594b9cd-1f32-4a23-8807-240cca0272a6", "indicator--76be25aa-e90b-45aa-8661-50bb74b126e5", "relationship--57f5329f-c195-4ad2-9595-f6d76c46627f", "indicator--f779084c-d990-412b-8fa7-b337b7520ea9", "relationship--6b350989-dc92-4a6f-8cd2-8df968913092", "indicator--130b4eb2-ca05-4abf-9e7b-18e83224260a", "relationship--6e2f3d81-7bdd-4b2d-9770-5434f453f879", "indicator--f34789e4-9900-46f5-9c2a-7affaaf53505", "relationship--bf0cc886-57fd-49f7-abf0-f81f6f9cb84f", "indicator--e51475c5-d5bc-4fc7-a225-3247ed767812", "relationship--bce7bb2b-1c20-4e50-b812-98bb5af12025", "indicator--a606b947-19d3-4318-8ffc-cca522158282", "relationship--e9ac0b42-ab9e-40d4-88e3-8851404dcee5", "indicator--5fa28b86-9008-4985-95f0-9734bfced728", "relationship--1ff94c71-0925-441d-82ae-83a0e907b4c6", "indicator--6ffbdf2e-9a6b-40a4-9a5e-7535c921f345", "relationship--5576fb89-6ef9-4b17-b5d3-39569be183fd", "indicator--8cd0b069-db65-448e-9b60-db167106e671", "relationship--eed7f013-6706-444e-a1f6-d0c18a45c2fb", "indicator--006dccd8-6cfa-4b29-a59b-21c5c300a39f", "relationship--490a5c6d-788c-4387-a841-e91d8f11c5d3", "indicator--278e1001-80c1-4708-b0a2-64ce3000c5b8", "relationship--bd27c48e-f090-4062-906e-84063fb02687", "indicator--951ef5d4-688c-4fd3-8023-43d669b320c3", "relationship--5ae1e3cb-7840-4714-b001-f97d4a8393d9", "indicator--7bc55a37-d1f6-4560-89ef-0cdfc671190d", "relationship--321e121d-58e6-4e7a-a882-d3277ae0b943", "indicator--5e73c071-3445-4e5a-8ab9-35e81b468933", "relationship--c11112b9-f905-4f88-85d8-a079918c1492", "indicator--0a87e865-f342-4a6b-8ddc-33e6a06bc179", "relationship--5d4d79d2-5bb4-4693-83df-552b37d2d576", "indicator--fb7d69ea-12bc-4617-bf10-98e85b14e5b2", "relationship--d76f13dc-c5e9-41c1-8297-3439244e9622", "indicator--d19bf318-6395-456d-a063-07c23752f137", "relationship--fb8e9917-71cf-4c9b-bcb0-76a0f2e616c4", "indicator--50a4ea37-dbde-4f08-81a4-366f3f2ff9b4", "relationship--59b17839-4a75-4223-8a85-7aeea13f522e", "indicator--4a14ab2d-4da0-4cd5-adb4-e2444d8720d1", "relationship--5bd40aa0-37dc-4379-ac2f-f931d5773cff", "indicator--a4097930-94e1-4273-aaca-b9d9bbebd8ac", "relationship--022d9a3a-9efd-4887-b728-a08b8f64d099", "indicator--c03d33e4-2742-432c-9463-94bbc39d6208", "relationship--8a2a8a39-428d-477c-9011-1defc68d33fa", "indicator--b1e987ce-94af-4a20-aa4f-122ff9ca0035", "relationship--8edac08e-5c39-4a84-9952-2c979fb33100", "indicator--7069c59e-db71-4a0f-8829-ef4a6cef437c", "relationship--93fd3abe-6cf3-4823-a4a9-4923be0749b0", "relationship--b5746d61-e7ff-4df2-a00c-33c591c9e030", "relationship--9ebf9841-c5a5-4c15-b036-e471cc9c34ab", "relationship--d05dc41e-0a9d-4576-998b-1900d8975776", "relationship--83fdeb0f-d6f8-46b1-8a76-d97e06a99c04", "indicator--a96cf6fe-589c-47e9-991d-1978150e8a33", "relationship--76db6f4d-91e1-4fbe-9239-daf484f8e803", "relationship--992c0bf2-9048-45d1-9e97-e07df5ce1450", "relationship--2a72507e-648b-4e49-9bdc-f8d2205793b9", "relationship--0df1b471-c1d8-4c15-bb25-8834efcf6f8d", "relationship--835ec258-e64e-405f-830d-b0f2a87dd6d6", "relationship--14e819a2-e5ed-4aa9-bd81-2c6c4342df8c", "relationship--409f7300-ca74-4a84-9e8b-f4041b31fee5", "relationship--d9c66814-e384-4068-bb24-92f60b3e06a9", "indicator--6055e13c-e235-4612-9ec6-7f627539158b", "relationship--d1b7c498-24f3-440c-9cf7-49ed50832c26", "relationship--fa92f87d-926d-4979-bf6a-1fc6a2795c81", "relationship--e7dfbba6-12c6-4994-88ad-8293498db5a5", "relationship--f9550c18-53e9-40cc-ba76-22c77e544f39", "relationship--d687baf8-031a-4833-a3b9-def596637e61", "relationship--8c156270-be1e-4405-b6c3-851bbeb707e1", "relationship--931eed9c-3569-4c99-bdab-718d049d718c", "relationship--370c556e-68a1-48cb-a96e-fee2d14652ee", "relationship--db35c8f1-be1d-4e3f-836a-17c3c1f5ee84", "relationship--dc9df264-24cf-4983-b059-fb364d414063", "relationship--a3b3b170-ce3e-4e11-b123-2b9a3fbdaeaa", "indicator--6178be86-294e-4798-a311-e31434c01c77", "relationship--e53a3b25-235f-4450-b648-3be578184f57", "relationship--36d39545-f40a-42df-bd14-a24141281dba", "relationship--31b4318f-717d-4c21-98d8-a35b1a750026", "relationship--7d301285-2e9b-4b06-95a4-4759aae46cbb", "relationship--5a546fb4-897a-4092-9a79-dd2018aac3b5", "relationship--d757889b-a320-4a1c-826b-ab0b1f2798f4", "relationship--5b70f848-326b-47d9-b14d-74aac6c47d89", "relationship--23c2036c-dbdb-49d2-a8e4-7adfc369a5c9", "indicator--88c6075f-cced-4627-b952-928fcbd8e413", "relationship--5c5e10bd-3504-4266-8598-cf3f494f6c0e", "relationship--471e53a9-9955-4aee-9546-90f43d6cfd63", "relationship--01c1db79-9120-4e00-b1fc-50f055d1cb85", "relationship--693a9995-12d0-4f10-aae9-b0cb8e8fc49b", "relationship--994b675e-076c-4381-bc54-7f0b3ec6244e", "relationship--9153553c-09a4-4bce-aa90-9f4393af87cd", "relationship--62226513-8c55-4487-9ee2-b44abc736958", "relationship--976c2b04-c514-46f7-9a28-1792dfc2e2aa", "relationship--5f88af08-e926-4e71-9d35-a14dbe0c77d6", "relationship--917fa45a-9140-4c08-9f5a-8bc974b22e4d", "relationship--364dc2ad-e2b9-487f-aca3-d602a59d913e", "relationship--df510614-222f-4e8c-8a22-1e29841c23d7", "relationship--92d65a1a-0b44-4c9e-9bf3-c39dd30e7da6", "relationship--c38e2df4-c86f-456c-bef0-4c6a43032035", "indicator--22c7b7c7-4f5d-40ea-9983-2734b6673707", "relationship--f4cf0a45-f872-4278-bea1-e4f9997ff97a", "relationship--4663fc31-c2b3-4b5f-82dd-ea088abf8f9b", "relationship--f1564f33-b106-47b8-9aae-a7ff405b5e69", "relationship--c0524f1a-6e5b-491c-9fb3-b1c23e4d2891", "relationship--f53ce7ba-f342-4d40-91c7-3c9eb9e7e0dc", "indicator--bee22f59-6ea5-4acd-964f-4561c8ca6d89", "relationship--b7d47da0-8517-4477-a340-e84f652f4177", "relationship--441bd3a9-c7ab-4a2b-8c59-443046c69d05", "relationship--09c43f13-5449-4275-af5f-f402add89c8c", "relationship--c2a0f5d6-a533-4987-ab98-548e819d1b39", "relationship--b54437c5-deab-4eab-bcec-a2be3aac85ab", "relationship--61307060-ea74-4dd4-a05b-715cf0a88fc9", "relationship--01e763fa-51d7-4b3e-ae49-59c347e7ddbf", "relationship--9abfaeda-5125-4b78-a487-5b1cbb66fb0c", "indicator--e8b09986-c8a6-49c7-b7ca-f66608d15549", "relationship--2a6967ae-a001-4008-8b44-23cb345d0c43", "relationship--ad2f0ea4-d88c-4da2-bead-1f79b1af175f", "relationship--99d82186-5cf8-418d-8012-7ffc66a7628e", "relationship--8c657546-6ffc-4437-bd1f-af65a6bfc6da", "relationship--938ead56-7cc4-472f-9420-6615685bf662", "relationship--a1aa8852-a60e-4af3-b17e-890e34cda0ee", "relationship--2379983e-8925-44ed-88de-e23d08e590d2", "relationship--8ff8248f-5cf1-46c8-b44d-ac9107216bd5", "relationship--a90fc1bb-f103-44f8-af35-d9136417d791", "relationship--94c9201a-33ef-4cad-bec9-5d45bea395ff", "relationship--e1311cc1-28f0-4699-b274-f2f5daf1fc3e", "indicator--2c1aaf9f-44f4-4345-ae28-3052dd23b453", "relationship--f34ca83c-8288-4b8a-b1bc-f76929fc44b5", "relationship--9de4c7aa-208a-4fc3-8301-da731533595e", "relationship--21543092-f136-4c6e-a8a9-2f7b6d57985a", "relationship--6875461c-9c61-442f-8d03-e1f57c20e5a2", "relationship--60068253-cba0-451f-9064-3fa237b6091d", "relationship--37101459-a169-4130-b0e9-30ff728e7380", "relationship--54d1617c-58f0-4c0a-95e2-abe0530d7662", "relationship--ce65dac9-3619-48d6-8f2c-9f6ee2fa39c5", "relationship--26acc1f7-baad-45eb-a3f2-7433e28a8008", "relationship--5e845fd3-e490-4dc7-ba80-d33b3edc25fd", "relationship--40c761ec-d793-4cb9-ba63-b45783522312", "relationship--68a9a3f9-4728-460c-b93f-0b37c221bb1d", "relationship--d1279ecd-2288-4cb4-a44c-c3752d6b7b0c", "relationship--95e53bbe-9d08-433c-afdc-a3c2d0c82fe5", "indicator--2f0ec11b-6ccd-4505-890b-ce62fd67cb47", "relationship--8cb43ae2-7b21-4faa-8c90-3aa322be9d52", "relationship--f5418f37-837a-486e-a18c-0e7ea52fe826", "relationship--c587487d-bd1e-4f10-86c0-5def6ca6f703", "relationship--d025140f-cfb2-4ba7-9bc1-7436edbd78db", "relationship--d0f1827d-77aa-40c1-97fb-167f3054fc4a", "indicator--4b8f804e-5826-44dd-baae-8a55ea3e23e8", "relationship--42290d3f-e94e-458a-aa23-56e1c19fe855", "relationship--e4e6e312-073f-46b2-b981-bd486527a6a3", "relationship--860162e7-703c-4e22-814f-ba37bfd5bf5d", "relationship--8d7d5248-62b0-4160-9fe7-bfe3f33338b2", "relationship--f964d19a-b22c-4387-a5af-de2221eba47d", "relationship--4a5b18c0-eed7-4bce-8fdd-3f86d53251cb", "relationship--23d52587-891c-4e70-8145-97b10a4fc276", "relationship--c78f5926-c2c3-43ff-b835-b92cbe926891", "indicator--fac37e5d-e528-444e-b77c-8fd437c465c7", "relationship--511dc3e5-cf4f-4cbb-a041-b1dde3e03278", "relationship--dbb5ce05-164e-4503-9115-61693690939b", "relationship--351c3f2b-74fd-45c8-8114-4a48674be1c8", "relationship--3c93a1e9-f911-4ae8-b1d0-88e2afe6cdc2", "relationship--d0eaaf13-21c1-4fc9-ab4b-76950d5cd0cb", "indicator--b1bd1cea-17cc-42bd-bdce-e8bbc3839faa", "relationship--6a0c1cad-056e-4a12-b820-4c4efc091604", "relationship--6a175ed0-a23b-4182-8682-771320172ce4", "relationship--4028a5d9-1eb5-41f4-80d9-6053524db741", "relationship--5f30747f-188c-47b4-ab87-18a1e594931e", "relationship--260d66c1-e0b7-4494-91f3-64474c3c330a", "relationship--f3c89e05-6480-41fc-87db-00391e7dbbe4", "relationship--1a6a2a0d-e600-48a7-ad52-4358f9374780", "relationship--7a1bea26-555d-4b64-886c-4255d422a135", "indicator--e68a62cf-83dd-4b33-945c-7e2fcb12aa79", "relationship--7313a71a-6d93-4b0d-9598-d642cbaf3fb0", "relationship--a6dbe1c1-8644-4254-8adb-55578fdc123b", "relationship--a0ebb458-0ecf-4e25-8ac8-4a9749bb5439", "relationship--3c5d73cf-b71d-47df-9944-e7a93fca76c7", "relationship--26524392-8860-437c-973c-b86cfd0b1a59", "indicator--63fc8613-d406-43ea-9de0-1f23d0b6f610", "relationship--b680f8d8-31f3-4ae4-ae38-e3f82efb613b", "relationship--8bfe16c0-c711-49c7-913a-d9340fb1eb07", "relationship--29a0baaa-ab74-42e5-af95-5f697ec02104", "relationship--695de900-9d36-4098-867e-30f952b081bf", "relationship--58e69a00-1ad6-4c2e-9f0a-85a6cc3df5bc", "relationship--dca0e5ad-530d-40c7-a2d4-a66df617d39c", "relationship--6b4e7536-fef3-4e1f-929f-794b75f96a7e", "relationship--5f27472f-fbce-49b6-839a-55dcb6ba38cf", "indicator--eb5314d8-823e-45ca-ba37-878ea674873f", "relationship--a575ed6f-f8b8-49c4-9020-499b2b0194f6", "relationship--8405b912-d613-405e-bfb1-9db890c0ac3f", "relationship--3d473d8d-92dc-4b53-9cec-cb1fce3323a0", "relationship--3df0d263-3764-425d-b2be-7a4cbb3cd498", "relationship--3fea5c57-8169-4153-9412-0313a1d36fe9", "indicator--4fcc7161-e9bd-42e7-a606-5b8f55069eef", "relationship--e727e669-cca4-4d3a-92c7-0fbdb32ec16d", "relationship--53e33702-883c-4a51-a7c1-89abd505c6d0", "relationship--518d8e93-eeb4-4445-9a64-bfd603eb792f", "relationship--baf84c46-2b8e-4678-aa8b-e1322282c278", "relationship--b0776d1e-c904-4bdb-9819-0177487e63f6", "indicator--9135fe23-4edb-41af-84f4-6afbfa0351cc", "relationship--988de095-aa06-4904-8241-36fbe45d0448", "relationship--4dc2af3d-2f6a-4dd5-a20d-2c8451f9d9f8", "relationship--c768655d-f737-4066-87a0-bea733094581", "relationship--5db3facc-2609-4c2e-b02a-3057c38611d1", "relationship--ed0c42a5-65c6-45f0-80af-94327cf63051", "indicator--87f1aa26-ccba-47a0-9b1f-1918cb1f5747", "relationship--550be8f6-f629-4e53-b350-f60906695991", "relationship--76424633-77ad-42ea-b2e9-782eb1f6c1fa", "relationship--e207f908-47fd-4d0f-b893-9cefdb6f617e", "relationship--db397998-6550-4415-91de-2702dd1dd085", "relationship--2f9ea60f-fb9c-4f5b-8d54-072cd1b743c1", "indicator--d57b50ca-aa34-4753-8a02-446f0c0baf8e", "relationship--4991672d-eafa-4aba-8773-be8660e0d557", "relationship--b0bcc9aa-923a-419f-97f7-b422caf89f00", "relationship--270bc27b-3a34-4b32-be89-6c6ed62f0b44", "relationship--27d88812-78b4-47bd-a26f-c9376897a0ef", "relationship--e7b9eca6-7c4d-4a7c-ac05-a8f24b1cf9b3", "relationship--e7138fe0-56bf-4da6-a968-119d07dddff7", "relationship--8eeb0a93-65dd-4f1c-9d70-08d554f14388", "relationship--a79d34a8-284c-4b10-a1e0-e9b6179c08f2", "relationship--3823a0ad-f2ae-45a0-b022-7aa83a33ef87", "relationship--6b3ea265-c648-4b4a-aed1-0e7ea3f82397", "relationship--156a6ea9-0624-4aaa-b086-7ea26433f8c1", "indicator--1504b1df-6919-475c-979f-b3b871147156", "relationship--89b46c27-1271-4f96-96fc-7211c0858f81", "relationship--7d0a6d26-3fea-4355-be12-d8989dfe4001", "relationship--6da71ba8-0e39-47c8-b78a-3d4d327f4912", "relationship--0ea28d95-d81f-4e4d-9ad9-11bac80133b6", "relationship--fb8459f4-e60c-43f6-aad4-55d5c0f9f8a6", "relationship--423e1346-cf6d-4bb0-b963-7331e434bc7e", "relationship--5c82de99-4f6e-4c2d-b152-a70fac1ca29b", "relationship--dcbec21e-458e-4c1b-a366-3bca7e2a7d06", "relationship--997b8a30-bd66-4f31-8bf4-cb243ec2de6a", "relationship--761541a0-0ee0-463e-ac22-f0fa15f3539f", "relationship--a80d8c76-78d2-45b6-9c50-49826509d927", "indicator--8bf8add6-cf7a-49b3-a714-6c94b9069269", "relationship--542f962b-ad78-4bc2-be0d-fb109bfd7d7a", "relationship--cc1a02d5-851d-474f-8be5-20cfb6d891d2", "relationship--5ba9348f-9b7b-4f54-94a7-273bb31dfe69", "relationship--1e08f80e-b542-4397-b296-ac1df92d8ce5", "relationship--e25fd383-345d-4504-ac63-69791ba0eb61", "relationship--69a07a77-f0fd-43f0-9ead-cfb4e8e57b0c", "relationship--21cb56b9-af7d-4ed5-8e99-7744f2506cfe", "relationship--92b891b2-977d-41e7-895e-6ad0b93f8ed6", "indicator--1afd5794-af1a-420c-9669-6f0a73b8c684", "relationship--a4faae4c-63da-4538-8d19-30a0b2c4bd3d", "relationship--1e5772b9-ac6b-4042-80d3-ec6d8a4bfc17", "relationship--d26d1c1d-6525-4978-97e3-5ed47aa673e7", "relationship--7181eb00-cff4-4e27-92f5-809ce070d5e3", "relationship--9da5c8ce-8dc4-4205-8641-7f2db834951b", "relationship--3c8b4bf0-167b-41f5-ae5f-bfe263d5592f", "relationship--d2f66ad7-0f13-4ec0-8d79-519a51fe3bfb", "relationship--5ebb2edf-18d6-4e2f-8f98-6376925c428e", "indicator--7d84a7d1-0ca3-4ecf-b253-5beaee9745b1", "relationship--411727b8-c44d-4f98-a343-3604a1bc656e", "relationship--14c15204-962e-4df5-8167-1803d75c09e8", "relationship--d0db3ab1-478f-46db-98c5-344ce9f3e93a", "relationship--363043a2-37c2-422c-81b2-05d6813785f1", "relationship--8c2c533b-d29c-460a-b059-0b63edb2da7d", "indicator--de9c9302-ffd9-4eda-84bd-57d8a5d8f69e", "relationship--c4a10262-15b0-4117-a525-d37d9119d2f3", "relationship--a79887fc-64de-477c-89e0-a0e9a46d16d4", "relationship--df343e77-0432-4989-a0e7-f3fb1cc54066", "relationship--ad0ea596-009a-4839-851b-43b7e5f5592a", "relationship--740a86a7-75eb-4d93-b6e5-8732498ad347", "indicator--f9b6c76e-d204-4958-9846-6931856325b2", "relationship--2940f37d-15a2-483b-9449-ff821d7a6325", "relationship--eb3c19a6-d23e-40dd-86c6-b498bcf6bcdb", "relationship--b40432b9-1eb5-4d19-aa8d-cf824384ea60", "relationship--35418a58-01d0-48c8-8bb1-23f48361a573", "relationship--54356106-3987-44d4-bcf1-db7dc0fe56b1", "relationship--0ccf17e1-e0f8-4a17-ab1b-6ac72c66097d", "relationship--1b98baea-412a-4a2c-9718-8e61d2d69c1e", "relationship--f71ca0aa-70aa-41b4-8ad6-22e826177138", "relationship--dd7b7267-8ee0-4e7f-8089-b4c495b92363", "relationship--2f31494d-b6b7-48a4-a987-1958690b7ef7", "relationship--dbbcef32-cbfa-4f96-bb65-eb3052dcb7aa", "relationship--4ffc77be-119a-49c3-b2a5-66a1611b1b3d", "relationship--5d06db9a-5522-40f0-a5d9-92ad7adc0ee2", "relationship--18d763bc-5b48-48fc-919a-9635d469f1d1", "indicator--fdecbbc3-2b08-416b-84c6-60fed75b92eb", "relationship--d564ffce-1d9d-441e-8734-0c21fe1ae874", "relationship--6da5a72b-c64d-43f3-8b3a-28666dece784", "relationship--3bb7e813-8812-454c-a6f0-6c3eda51a31b", "relationship--a1ab0422-1714-43ab-8699-7293575e5852", "relationship--e4df4497-7b52-4681-8123-e32db50f4ae1", "relationship--55e6478d-6ec0-492a-bb65-e50afd361674", "relationship--d77620a0-9abf-4d2d-9a67-d34714e1eed3", "relationship--e67b8a33-cb88-4226-b476-5db011b88b38", "relationship--f775e461-6442-452f-8ed9-a0f676210657", "relationship--d33390db-820a-46b8-8662-c796ae57fb9c", "relationship--dd3b3971-dd93-4399-8229-8f41d446f2ca", "relationship--61b71f1f-8957-4573-8e33-ec6d88050946", "relationship--68a986d2-8c7d-4bc7-b106-8287a77f6994", "relationship--95877ec0-7bc9-4582-8e81-5414e8cb3e05", "indicator--fbda9c46-a32c-4afe-ac89-a90b77cb2ab5", "relationship--18d8bf06-0481-4ec3-a57d-a0f93fc4b9d6", "relationship--dcc73e60-98c5-47fb-b25b-51ce1ab06f42", "relationship--72c292a0-a671-4d71-af28-fb97de92daaf", "relationship--731bbc61-e1b9-4665-8049-3f5896992df3", "relationship--f79272e0-4898-4263-9c1a-8ad8a5b075bb", "indicator--c4979765-0f5e-406a-ae56-8722f934bb7a", "relationship--d6ab1a11-4e4b-4276-bb62-0a9985406675", "relationship--feb904e2-e2d5-4197-923c-4b9328ff6138", "relationship--d9763ada-0e32-4ab0-a257-41ad96ae1009", "relationship--cc619a08-306e-4737-b1e1-4c2dbb6698fd", "relationship--e11375e4-2cc7-43da-9eda-119d86a75edb", "indicator--bfac50ab-fd9b-4e88-b73a-3247d631e70a", "relationship--6863cf35-8fd1-4616-b8d5-46f24f7442ac", "relationship--c1ea536a-9138-4068-a418-a6b5820f4fab", "relationship--2cb32bcd-663d-4d52-9ee4-ee416ed899f4", "relationship--d8082e21-ad5b-4f5b-afb2-ec0c59d89539", "relationship--f746a148-3f82-4697-9097-31e4047790f1", "relationship--0cc98596-7a8d-465d-882c-c6fc7bb47439", "relationship--50d7ffab-96dd-4104-ae3e-b793f6926d69", "relationship--bfdcbb39-7615-40e8-9f57-1709ed9c126a", "relationship--14771809-e2c4-449a-b5fa-4d6124a19fb0", "relationship--5bd33efd-e80d-44ab-b537-2930e97a10c3", "relationship--76ee618b-445d-4bee-b066-2ae67fd19d7b", "relationship--c2833a2d-f56a-4106-aa05-3eb592093adc", "relationship--9a95f48d-7405-4b5d-ac6d-bfc3422ae939", "relationship--e4c0ef85-d168-4af1-8294-3ce8a07fa39c", "indicator--ad38f035-afa7-4a8b-ad6f-9c60a4a5af50", "relationship--1776323f-dfec-40a7-9d9c-9db3de288573", "relationship--a1c5b14a-da6d-46fa-b9fb-c18013037b71", "relationship--68ecdbbe-ee45-4386-849c-93030db700f9", "relationship--9df81b0e-5c78-4584-aab0-8695abdb18f4", "relationship--ee423b0c-20fb-4e11-89f4-a39dfe5c4b79", "relationship--ca8b4015-7e09-4d3b-97f3-cc60b6062378", "relationship--d70d26c8-f285-47de-a782-a29744bed381", "relationship--40612bbb-89c4-41b1-a8f6-9be6afc3b33c", "relationship--daa02846-2f42-420e-8730-d715dedafab0", "relationship--5580412c-e826-445f-9529-855df5b1c1a5", "relationship--719aeef2-044b-4566-8e72-dda9f6944aeb", "relationship--51d06b48-603f-4ee6-92b9-b6de036462a9", "relationship--c0724bae-d8df-4be4-a6a2-4bb7929555e6", "relationship--02e7e0b5-1ddb-4cdb-bec7-13bd332c4c1c", "indicator--b4737137-e021-4618-92b0-55d98c297418", "relationship--4aafab3b-9c75-4f99-8c09-fe9dd22009d3", "relationship--d9ce8efd-361a-4fd6-8815-ea7a0482fa76", "relationship--857caef7-40d5-4b0f-a9fe-dd6b7e19f815", "relationship--bf737209-f72b-43f7-b453-289e51cd646b", "relationship--e699253f-78fb-47ef-9feb-6a54e2f47219", "relationship--d7825fdc-55ef-45a6-98ef-24b3e3aabb95", "relationship--615e7279-2209-4afb-9661-269a22bda8d1", "relationship--d9080f73-dedd-47f3-a16e-86998d063f35", "relationship--9a7101e6-6e9d-43d9-ba08-9d5fae8f7eb8", "relationship--a5080e28-070f-459d-ba5d-80bd8b1ab582", "relationship--aa21981f-87a7-4284-97ef-0cb2d4213bf7", "indicator--e73b0159-b059-4519-bca0-097aa4d74c3c", "relationship--5e040b1c-ab5c-42a9-82f7-18d9d6db0b6f", "relationship--807f0502-21fa-4b2a-9799-0daa32bdbb33", "relationship--dbd3eca8-dce6-4b5c-b56c-c17ce3498559", "relationship--a122d4fb-a771-4031-9618-4691ec0523ae", "relationship--64992c7d-e1b5-4e66-8336-e2ede4d25239", "relationship--7e9d1d7d-a5c7-4cf8-8029-62b598a26a28", "relationship--180e8048-e736-4356-945b-a384049ecaa5", "relationship--256d77da-1221-4fb2-9b0d-aab0185f8080", "relationship--953056b5-d757-45d8-9f93-87563fefcfb2", "relationship--2b49c684-da98-41fe-810a-0f10d32d2723", "relationship--81516e96-ea19-4018-8cb0-5bd720d3262d", "indicator--9febf644-ec0d-4266-8c3b-4243665fd6d1", "relationship--e743cbfe-22b6-43e4-a026-75d98e6495c2", "relationship--69344260-eec9-4e57-973e-49ccbbaa8a99", "relationship--b23c8e01-df05-4048-ba73-b2e1468a7d0a", "relationship--8403f641-bacc-42bd-b2ed-5619b0e15bf1", "relationship--acff6b72-0711-44cc-a316-9a49cef7885f", "relationship--346b617c-b9e4-45f6-aed0-5f308ccac012", "relationship--a5dd0d33-8a9c-47e2-b3ce-c79866d00a9b", "relationship--00f66891-1322-4c11-a30c-12c9dc126da8", "relationship--3bd18985-213c-4dc0-86cc-820b9cf4815a", "relationship--52698fa8-137e-43d9-8366-4e711dbc78df", "relationship--03e8694f-e015-4109-9831-93641bb18cda", "relationship--669c7d71-0576-4c32-85b3-b68342386b3f", "relationship--6990b049-9eb7-4333-84b0-a93bb21f1380", "relationship--59632d0c-c507-4f6e-a87b-2e89a8cecf04", "indicator--6f709759-0d04-4003-b8df-130a76a0a3db", "relationship--ebdfcb27-a89a-4ab6-9cab-d623e0e66be9", "relationship--fb6189c1-f59a-493a-adfc-0f891edf4da4", "relationship--c2cb01ab-4d6b-45ab-8fa9-97617867a6a7", "relationship--c7fffdee-0ce0-4224-a090-f3c55d543b64", "relationship--567dbf0e-1359-4ac7-a323-375f2b7b4464", "relationship--0e8063e2-c029-440a-a7b1-9468640fc33d", "relationship--0c72192b-315f-4bd7-9aef-854aa45c5c03", "relationship--645cf691-0038-4f4f-a663-56943671819b", "relationship--bca3304a-fe69-44dd-8801-47429e44769f", "relationship--3a44362a-fe54-4cb2-bb61-3a2ad34da0a9", "relationship--451cf7b7-e7c0-42b6-93ee-9bf3d6b76ec6", "relationship--6d3bac25-7946-4f88-86d9-dc3a5c9878bf", "relationship--ee0e3399-1771-48ff-b779-7d31700742a4", "relationship--8bbcf940-bf01-48d8-98a5-f4f8a5b3cf4a", "indicator--51e5dddb-0080-40e1-a41e-d17d727b6f3c", "relationship--4b290bdd-0636-4124-afe4-84b18a0496c6", "relationship--25dd9622-ac02-4bdd-9956-edb45716a28e", "relationship--89315890-9bf1-4bbe-9e53-eab5e388de24", "relationship--5dcae2f0-e53b-4c59-bb25-4e12aa095fe5", "relationship--98137cb2-3f55-4442-a86f-532705b5c8d1", "indicator--c8e02e81-f4c3-496d-b408-fb0dc04926ff", "relationship--1ccb5cec-7ae9-419f-a325-f7c541f08274", "relationship--aff06b9f-25e0-45e5-9a39-b8bd2f6140f8", "relationship--360de7c0-9997-4c9b-b878-60fcfdfa7257", "relationship--170df982-a62b-447d-b0e2-18cd9113885a", "relationship--89ab88b8-e41a-4382-99c4-5b972d4bbc64", "indicator--6afa65fd-e0dd-44fc-99f7-35490d6e9e41", "relationship--d05458f3-2461-4053-b5a1-b82c95e8f29e", "relationship--2810b9c6-e553-41b1-98c5-6b4b5a4573c4", "relationship--1c1ceb57-3181-4b56-b0a4-4ba9ed2dcad8", "relationship--f72d919b-c768-4600-a563-603535484e42", "relationship--a3811b59-128e-4701-a6b3-723bf3e478a5", "relationship--7bc99c0d-dfc6-443d-a227-4992135b794f", "relationship--cd15ec29-739d-4ce6-ae88-2f3476a2720a", "relationship--578a6197-c207-4655-91f0-67b98071a82c", "indicator--6a635014-94ea-4c4d-9aac-39d9ec4f50c8", "relationship--d94b9500-f20d-4a9c-9cb6-4d94b1fd275b", "relationship--e0a20b26-f13e-4723-b91d-63276967ac28", "relationship--05c9a78c-ce88-44e3-ac9c-cda8380852f0", "relationship--b11fd792-9433-4bbd-877e-cc74712a041e", "relationship--83cf7782-1804-491f-b207-5301dec4e0e9", "relationship--47c53dac-f16e-4ffb-be14-92adc69dc532", "relationship--1fa9c2e5-3f2f-43f9-8e26-59ee25fdd1ca", "relationship--4a25c7f4-50b2-4d53-b730-ce8150f05e8e", "indicator--455d5fcd-bd25-4328-a650-8b1eb44816fc", "relationship--63e537dc-4375-400e-949b-87500d7dbe21", "relationship--6b5de04b-2990-4dcb-8b35-36b2321038e9", "relationship--44b863c8-93fc-4968-b7ef-914bdc85550e", "relationship--00a18abb-93a5-4514-bc3c-ac80cb935b62", "relationship--a46ea7dc-fcdf-4067-8e9b-1f9d8cddce0d", "relationship--25ed3202-fc56-47ce-9da4-9dd7a40feb73", "relationship--05da1b8b-f793-46d0-9058-3e853f797f35", "relationship--5e62840b-c36f-48e6-abf3-66f7cfa3dff1", "indicator--d90cbe60-838a-4497-b39b-abbc5ca7968e", "relationship--24b7f4b1-e569-4f37-94c5-74fe1e48e92f", "relationship--ea6a7eee-7cc4-45f4-b37e-4d24fc6a171a", "relationship--539d73eb-6ba2-4e63-b505-80db74e963a1", "relationship--2587c6f1-f7f2-4964-9f18-c12cdaac6a40", "relationship--79786531-b69a-4af0-a2d0-692dd635f117", "relationship--3de17ceb-3ac3-456a-b231-9e88a3823120", "relationship--47699c88-ab48-40c3-a4a1-29391a3da00d", "relationship--e60332ff-9317-4a06-936b-6022ff15b54e", "indicator--496ef844-83a2-481e-98e1-945de2c25630", "relationship--896cbaa7-6b61-439d-a4aa-d661b3f10c90", "relationship--3521f2ff-665c-4c50-af01-4406a760d1bc", "relationship--a5009901-88a3-49e1-9c1d-54f6660ac841", "relationship--ad933406-d8e9-486d-be33-4c8777e47a0c", "relationship--7d2b49d8-c23f-4688-88e8-3654ec227919", "indicator--1481504c-0177-49f7-848e-ea5e0b069a98", "relationship--0187baf5-eb31-4e38-9c7d-821d31874404", "relationship--f162c56b-1026-4137-89f8-9496f2d3f966", "relationship--01abe036-2638-47a8-8dbb-bdcee3d37729", "relationship--9acaffe2-61e0-4736-8986-a0d383e438f4", "relationship--a70253bd-8af9-4a07-a530-7b3e9b51053a", "indicator--3f9ff89a-fc69-4f99-8912-e018993785df", "relationship--fc701e14-7fd6-4f81-8528-3c9af2f115b8", "relationship--0eaa620d-368c-4ddd-b1ae-369b5e2ac087", "relationship--fc60e23d-e1f2-41d2-a396-0338c65319f2", "relationship--96e70560-6d82-47bd-a5d8-220b3dd2ffcc", "relationship--ea7b643d-7271-4446-bf39-0b2954c9b41c", "indicator--1d64cf93-dbc6-49dd-962c-e18a8ea03969", "relationship--67625472-38b7-486c-aa3d-6a7c4f1e84b3", "relationship--44ee38ad-e436-44a0-a6f7-703e642fe6af", "relationship--ead8ff9f-636e-4928-a5ce-a08c62097fe7", "relationship--3fcabfc7-099d-40a7-9ac7-d57d1b7639b6", "relationship--208318bf-b7da-494b-ba34-79c93dd7b83b" ] } ] }