{ "type": "bundle", "id": "bundle--5b3d4d2b-8d36-4c46-adfe-6f64b0d37bec", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.560726Z", "modified": "2026-06-14T11:55:43.560726Z", "name": "The Hunters Ledger", "identity_class": "organization" }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } }, { "type": "ipv4-addr", "spec_version": "2.1", "id": "ipv4-addr--bef565ae-5d19-54fe-9006-25ed9da29673", "value": "79.137.192.3" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7687fd58-e250-5606-b2b3-2f3f8e5c319a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.5611Z", "modified": "2026-06-14T11:55:43.5611Z", "name": "ipv4: 79.137.192.3", "indicator_types": [ "malicious-activity" ], "pattern": "[ipv4-addr:value = '79.137.192.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--a9d7476c-3d80-5b2c-98b6-71505ae1afc2", "value": "https://79.137.192.3/" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8482362e-4a99-5a1f-afff-bbef1d84ad86", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.567248Z", "modified": "2026-06-14T11:55:43.567248Z", "name": "url: https://79.137.192.3/", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://79.137.192.3/']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--252fd038-7ac3-5392-90d5-39ed7a4e2f90", "value": "https://79.137.192.3/BellaMain/" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cdbc6d22-5f04-5e08-816c-7d866d05d23e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.568967Z", "modified": "2026-06-14T11:55:43.568967Z", "name": "url: https://79.137.192.3/BellaMain/", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://79.137.192.3/BellaMain/']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--95b9d1ff-60fc-536f-af43-b4b60093eefa", "value": "https://79.137.192.3/cryptone/" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ac2e78ac-a9b0-5ee4-af5c-a50261a7c5fd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.570484Z", "modified": "2026-06-14T11:55:43.570484Z", "name": "url: https://79.137.192.3/cryptone/", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://79.137.192.3/cryptone/']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--1e5c34e3-21a7-55bb-9d47-58b682e2f7ee", "value": "https://79.137.192.3/no/" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5ab6d935-38b3-5d7a-9935-a1511db09cce", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.572292Z", "modified": "2026-06-14T11:55:43.572292Z", "name": "url: https://79.137.192.3/no/", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://79.137.192.3/no/']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--7a87a189-ed02-592d-994c-5ae80f8cd6d8", "value": "https://cryptone.bot/" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e5a1586a-793d-5af6-be39-26bd588397e2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.573311Z", "modified": "2026-06-14T11:55:43.573311Z", "name": "url: https://cryptone.bot/", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://cryptone.bot/']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 80 }, { "type": "url", "spec_version": "2.1", "id": "url--fb7ac48d-aad8-51d5-928d-abdfce08ce0f", "value": "https://www.usom.gov.tr/url-list.txt" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2d0dde9d-b206-53b3-970f-cabb56a56798", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.575123Z", "modified": "2026-06-14T11:55:43.575123Z", "name": "url: https://www.usom.gov.tr/url-list.txt", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://www.usom.gov.tr/url-list.txt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--a563b73d-9c16-5fa5-a08d-da8298d59201", "value": "https://api.binance.com/api/v3/ticker/price?symbol=TRXTRY" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--85e3e5ed-23b4-5a03-8549-49ed50b2b3ad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.576153Z", "modified": "2026-06-14T11:55:43.576153Z", "name": "url: https://api.binance.com/api/v3/ticker/price?symbol=TRXTRY", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://api.binance.com/api/v3/ticker/price?symbol=TRXTRY']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--f282b868-cf66-5733-a3a4-98fb8aa84ec3", "value": "cryptone.bot" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0893edb6-299b-5a34-b8f0-968d93022caf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.577349Z", "modified": "2026-06-14T11:55:43.577349Z", "name": "domain: cryptone.bot", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'cryptone.bot']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 80 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--7dbdc38c-55bf-57c4-a914-edbed6952454", "value": "evotoptan.com" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ad7126bf-a3d8-52cc-bef2-ebd1f25912ae", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.582268Z", "modified": "2026-06-14T11:55:43.582268Z", "name": "domain: evotoptan.com", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'evotoptan.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 60, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 60 }, { "type": "file", "spec_version": "2.1", "id": "file--a771c71e-a691-586b-be08-94b3a1308c67", "hashes": { "SHA-256": "f791fae41cdd3f141221d1783ed4779c839de7fc834ff4fc80a5d7f74b11ff88" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6ea87d8f-b64a-5056-bedb-8a4cb23b4eaa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.583515Z", "modified": "2026-06-14T11:55:43.583515Z", "name": "sha256: f791fae41cdd3f141221d1783ed4779c839de7fc834ff4fc80a5d7f74b11ff88", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = 'f791fae41cdd3f141221d1783ed4779c839de7fc834ff4fc80a5d7f74b11ff88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--09430cff-d568-59fa-89a4-bc3587391aea", "hashes": { "SHA-256": "2c656360c4e58854dca35ff21b3fc62db41155ca76f8568ecc18fa52aa38fb31" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a91be888-c519-535f-9ffc-5fce3143a387", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.584375Z", "modified": "2026-06-14T11:55:43.584375Z", "name": "sha256: 2c656360c4e58854dca35ff21b3fc62db41155ca76f8568ecc18fa52aa38fb31", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = '2c656360c4e58854dca35ff21b3fc62db41155ca76f8568ecc18fa52aa38fb31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--a03ca6aa-180a-579a-ab75-71ec4c039314", "hashes": { "SHA-256": "705793c011fdfe17941700a3bf42eee0ba2ebdc04870ce19779ea528b3565fac" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0bdd4f90-17e2-5af9-a648-4ae6bd76f23a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.586053Z", "modified": "2026-06-14T11:55:43.586053Z", "name": "sha256: 705793c011fdfe17941700a3bf42eee0ba2ebdc04870ce19779ea528b3565fac", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = '705793c011fdfe17941700a3bf42eee0ba2ebdc04870ce19779ea528b3565fac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--172f5e07-a213-56d4-8589-2553d29dec5a", "hashes": { "SHA-256": "e21fb63a3b4d65a3d48dec1bf17a84a414482f819b93cb8d77a81852dc34c95f" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f93c9e10-f908-557b-a878-a64dc1b8f2ed", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.587445Z", "modified": "2026-06-14T11:55:43.587445Z", "name": "sha256: e21fb63a3b4d65a3d48dec1bf17a84a414482f819b93cb8d77a81852dc34c95f", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = 'e21fb63a3b4d65a3d48dec1bf17a84a414482f819b93cb8d77a81852dc34c95f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--d6cc8480-af87-5520-92f7-1664f4b684d0", "hashes": { "SHA-256": "ee9d4fccebbf73fb33980da15142bc71e5d9661d1bc583c2b09b77490065efd9" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cb1ced5e-8ce2-5a01-bcd8-c67bfa2749db", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.588738Z", "modified": "2026-06-14T11:55:43.588738Z", "name": "sha256: ee9d4fccebbf73fb33980da15142bc71e5d9661d1bc583c2b09b77490065efd9", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = 'ee9d4fccebbf73fb33980da15142bc71e5d9661d1bc583c2b09b77490065efd9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--bd9e4afa-4db3-54c9-96ff-88896edbeaa9", "hashes": { "SHA-256": "b2f4f1617577d14612b30a54a733b15af809c399f325717b4329c13aaa4c915c" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6a921d96-534d-59fd-a6a7-1423dfe3c1f4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.591646Z", "modified": "2026-06-14T11:55:43.591646Z", "name": "sha256: b2f4f1617577d14612b30a54a733b15af809c399f325717b4329c13aaa4c915c", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = 'b2f4f1617577d14612b30a54a733b15af809c399f325717b4329c13aaa4c915c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--1d95e447-3ee0-5b20-89f3-267ccf44ef32", "hashes": { "SHA-256": "504b1a30ce7060eafa7b2a3f6249c954a0be6ce1d2930e03b030434cb232600a" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4652c8d4-2fc6-505a-8a87-f4ebc56946fc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.592822Z", "modified": "2026-06-14T11:55:43.592822Z", "name": "sha256: 504b1a30ce7060eafa7b2a3f6249c954a0be6ce1d2930e03b030434cb232600a", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = '504b1a30ce7060eafa7b2a3f6249c954a0be6ce1d2930e03b030434cb232600a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--e7000fa0-da4b-5a63-b341-81ca40b9bc10", "hashes": { "SHA-256": "219cd4f6177a2358ec7f06b230d611f47e1049fcb3e2b44d06ec410b336382b0" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--835e7fcb-cb7b-5047-8f2f-d850274c7d89", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.594709Z", "modified": "2026-06-14T11:55:43.594709Z", "name": "sha256: 219cd4f6177a2358ec7f06b230d611f47e1049fcb3e2b44d06ec410b336382b0", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = '219cd4f6177a2358ec7f06b230d611f47e1049fcb3e2b44d06ec410b336382b0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-16T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": true, "x_opencti_score": 95 }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bd978fd0-3b2c-5b6e-8869-8924c118e535", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.59734Z", "modified": "2026-06-14T11:55:43.59734Z", "name": "TOOLKIT_BellaMain_WadanzFunctions", "indicator_types": [ "malicious-activity" ], "pattern": "/*\n Name: BellaMain PhaaS Panel - Wadanz Author Functions\n Author: The Hunters Ledger\n Date: 2026-05-16\n Identifier: BellaMain Turkish PhaaS V5VgjLU0jsDe\n Reference: https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\n License: https://creativecommons.org/licenses/by-nc/4.0/\n*/\n\nrule TOOLKIT_BellaMain_WadanzFunctions\n{\n meta:\n description = \"Detects BellaMain Turkish PhaaS panel PHP source files containing the author-pseudonym session-cipher function pair sifreleWadanz and sifrecozWadanz in database/fonk.php or any forked copy. The Wadanz suffix is the developer identity artifact unique to this codebase.\"\n author = \"The Hunters Ledger\"\n date = \"2026-05-16\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\"\n hash_sha256 = \"f791fae41cdd3f141221d1783ed4779c839de7fc834ff4fc80a5d7f74b11ff88\"\n family = \"BellaMain\"\n\n strings:\n $func_enc = \"sifreleWadanz\" ascii\n $func_dec = \"sifrecozWadanz\" ascii\n $db_user = \"dbjakartaxdw\" ascii\n $db_name = \"jakartaxdw\" ascii\n\n condition:\n filesize < 512KB and\n $func_enc and $func_dec and\n 1 of ($db_user, $db_name)\n}", "pattern_type": "yara", "valid_from": "2026-05-16T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e2c286a6-ce86-59e3-995c-a641f07be090", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.597824Z", "modified": "2026-06-14T11:55:43.597824Z", "name": "TOOLKIT_BellaMain_AdminPanel", "indicator_types": [ "malicious-activity" ], "pattern": "/*\n Name: BellaMain PhaaS Panel - Admin Path and Credential Strings\n Author: The Hunters Ledger\n Date: 2026-05-16\n Identifier: BellaMain Turkish PhaaS V5VgjLU0jsDe\n Reference: https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\n License: https://creativecommons.org/licenses/by-nc/4.0/\n*/\n\nrule TOOLKIT_BellaMain_AdminPanel\n{\n meta:\n description = \"Detects BellaMain Turkish PhaaS panel PHP source files containing the obfuscated admin directory path V5VgjLU0jsDe and the shared MySQL database user dbjakartaxdw. These two indicators co-occurring in PHP source confirm a BellaMain panel instance or direct fork.\"\n author = \"The Hunters Ledger\"\n date = \"2026-05-16\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\"\n hash_sha256 = \"705793c011fdfe17941700a3bf42eee0ba2ebdc04870ce19779ea528b3565fac\"\n family = \"BellaMain\"\n\n strings:\n $admin_path = \"V5VgjLU0jsDe\" ascii\n $db_user = \"dbjakartaxdw\" ascii\n $db_pass = \"W!@25#8Tb2gxq15\" ascii\n $cmd_del1 = \"/hesapsil\" ascii\n $cmd_del2 = \"/kartsil\" ascii\n $cmd_del3 = \"/girislogsil\" ascii\n\n condition:\n filesize < 512KB and\n $admin_path and $db_user and\n 1 of ($db_pass, $cmd_del1, $cmd_del2, $cmd_del3)\n}", "pattern_type": "yara", "valid_from": "2026-05-16T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--61ea88ab-de01-5937-b2a8-98c1e7a5065f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.598078Z", "modified": "2026-06-14T11:55:43.598078Z", "name": "TOOLKIT_BellaMain_AntiResearcherCanary", "indicator_types": [ "malicious-activity" ], "pattern": "/*\n Name: BellaMain PhaaS Panel - Anti-Researcher Canary Strings\n Author: The Hunters Ledger\n Date: 2026-05-16\n Identifier: BellaMain Turkish PhaaS V5VgjLU0jsDe\n Reference: https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\n License: https://creativecommons.org/licenses/by-nc/4.0/\n*/\n\nrule TOOLKIT_BellaMain_AntiResearcherCanary\n{\n meta:\n description = \"Detects BellaMain Turkish PhaaS kit girislog.php files containing the anti-researcher canary string cluster. The ?lg= GET parameter triggers these strings, causing the kit to fire a Telegram alert with researcher IP and UA and return a Turkish-language troll response. Presence in a PHP file confirms BellaMain kit provenance.\"\n author = \"The Hunters Ledger\"\n date = \"2026-05-16\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\"\n hash_sha256 = \"219cd4f6177a2358ec7f06b230d611f47e1049fcb3e2b44d06ec410b336382b0\"\n family = \"BellaMain\"\n\n strings:\n $sazan_ip = \"Sazan IP\" ascii\n $sazan_kod = \"Sazan Kod\" ascii\n $sazan_cihaz = \"Sazan Cihaz\" ascii\n $usom_msg = \"Usom Yedik Atis Stop\" ascii\n $ares_alias = \"@AresRS34\" ascii\n $lg_param = \"?lg=\" ascii\n\n condition:\n filesize < 512KB and\n 2 of ($sazan_ip, $sazan_kod, $sazan_cihaz, $usom_msg) and\n 1 of ($ares_alias, $lg_param)\n}", "pattern_type": "yara", "valid_from": "2026-05-16T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1d2ea644-0f79-5602-b8d4-aaa50d2e426c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.598304Z", "modified": "2026-06-14T11:55:43.598304Z", "name": "BellaMain PhaaS Admin Panel Path Access", "indicator_types": [ "malicious-activity" ], "pattern": "title: BellaMain PhaaS Admin Panel Path Access\nid: a3f7c291-84e2-4d1b-9c5a-f6e8b2d04371\nstatus: test\ndescription: >-\n Detects HTTP GET or POST requests to the BellaMain Turkish PhaaS panel\n obfuscated admin directory V5VgjLU0jsDe. This 12-character random path is\n hardcoded across the BellaMain codebase and is not guessable via common\n wordlists. Any inbound HTTP request to this path on a web server indicates\n either a BellaMain operator accessing the admin panel or an attacker who\n has obtained the path from a compromised deployment.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\nauthor: The Hunters Ledger\ndate: 2026/05/16\ntags:\n - attack.persistence\n - attack.command-and-control\nlogsource:\n category: webserver\ndetection:\n selection:\n cs-uri-stem|contains: 'V5VgjLU0jsDe'\n condition: selection\nfalsepositives:\n - >-\n Legitimate web application with a coincidentally identical path component\n (effectively impossible given path length and character set; treat as\n confirmed BellaMain activity and investigate)\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-16T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--445fca4a-c9b7-5d08-b36b-4eeb85e5d0c3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.59849Z", "modified": "2026-06-14T11:55:43.59849Z", "name": "BellaMain PhaaS USOM Blocklist Poll and Telegram Bot Outbound", "indicator_types": [ "malicious-activity" ], "pattern": "title: BellaMain PhaaS USOM Blocklist Poll and Telegram Bot Outbound\nid: b82d1f44-c7a9-4e53-a2f1-9d3c6b08e592\nstatus: test\ndescription: >-\n Detects a web server process making outbound HTTP connections to both the\n Turkish CERT USOM URL blocklist (www.usom.gov.tr/url-list.txt) and the\n Telegram Bot API (api.telegram.org) within the same 5-minute window.\n BellaMain's usmcheck.php polls the USOM list to detect when its phishing\n kit domains are blocklisted, then broadcasts a kill-switch command via\n Telegram. No legitimate web application combines USOM blocklist polling with\n Telegram bot communication. The USOM URL alone is moderate FP risk on\n Turkish security platforms; the Telegram combination is the discriminating\n indicator.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\n - https://www.usom.gov.tr/\nauthor: The Hunters Ledger\ndate: 2026/05/16\ntags:\n - attack.discovery\n - attack.command-and-control\nlogsource:\n category: proxy\n product: zeek\ndetection:\n selection_usom:\n cs-host|contains: 'usom.gov.tr'\n cs-uri-stem|contains: 'url-list.txt'\n selection_telegram:\n cs-host|contains: 'api.telegram.org'\n cs-uri-stem|startswith: '/bot'\n condition: selection_usom and selection_telegram\nfalsepositives:\n - >-\n Turkish CERT partner organizations or security researchers monitoring USOM\n list while simultaneously operating a Telegram notification bot\n - >-\n Security monitoring scripts that legitimately combine USOM polling with\n alerting via Telegram bots (tune by excluding known-legitimate source IPs\n and authorized bot token prefixes)\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-16T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5cc83de1-db8a-5de5-b5b5-469b64245206", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.598667Z", "modified": "2026-06-14T11:55:43.598667Z", "name": "BellaMain PhaaS mysqldump Invocation by PHP Web Process", "indicator_types": [ "malicious-activity" ], "pattern": "title: BellaMain PhaaS mysqldump Invocation by PHP Web Process\nid: c914e7a2-5b36-4f87-b3d8-2a1e9c047f83\nstatus: test\ndescription: >-\n Detects mysqldump invoked with a plaintext -p password argument by a PHP or\n web server parent process. BellaMain's /yedek Telegram command executes\n mysqldump via PHP shell_exec() to produce a SQL backup that is then sent to\n the operator's Telegram channel via sendDocument. Legitimate database backup\n jobs run under dedicated service accounts with credential files rather than\n plaintext -p arguments spawned from a web-server process. This combination\n of parent process (php/php-fpm/apache2/nginx) and mysqldump child with a\n -p flag is a strong behavioral indicator of BellaMain's backup-as-exfil\n capability.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\nauthor: The Hunters Ledger\ndate: 2026/05/16\ntags:\n - attack.exfiltration\n - attack.defense-evasion\nlogsource:\n category: process_creation\n product: linux\ndetection:\n selection_parent:\n ParentImage|contains:\n - 'php'\n - 'apache2'\n - 'nginx'\n - 'httpd'\n selection_child:\n Image|endswith: 'mysqldump'\n CommandLine|contains: '-p'\n condition: selection_parent and selection_child\nfalsepositives:\n - >-\n Legitimate PHP-based database management tools (phpMyAdmin export\n function) invoked by an administrator \u2014 correlate with legitimate admin\n session timestamps and exclude known-good source IPs\n - >-\n Automated backup scripts incorrectly launched from web process context\n during provisioning or testing\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-16T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1661a35a-7708-5274-ada2-af503f2db671", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.598807Z", "modified": "2026-06-14T11:55:43.598807Z", "name": "BellaMain PhaaS Turkish-Language Role-Bot Telegram DNS Query", "indicator_types": [ "malicious-activity" ], "pattern": "title: BellaMain PhaaS Turkish-Language Role-Bot Telegram DNS Query\nid: d7a3c158-6e92-4b04-9f17-4b2d8e1c5a09\nstatus: experimental\ndescription: >-\n Detects DNS queries for Telegram bot usernames matching the BellaMain\n Turkish-language role-suffix pattern. BellaMain deploys four specialized\n bots with Turkish-language function names: girisbot (login exfil), vergibot\n (national-ID alerts), dekontbot (bank-statement approval), and cekimbot\n (withdrawal approval). These names reflect the PhaaS panel's victim-funnel\n architecture. While individual Turkish-language bot names may appear in\n legitimate contexts, their co-occurrence with web-server process DNS\n queries and the role-suffix pattern is specific to BellaMain. Note: DNS\n queries for api.telegram.org resolve bot traffic generically; individual\n bot names are not DNS-resolved separately in the Telegram API protocol.\n This rule targets cases where bot usernames appear in DNS query strings\n from internal web-server hosts (e.g., via t.me resolution or bot-lookup\n endpoints).\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\nauthor: The Hunters Ledger\ndate: 2026/05/16\ntags:\n - attack.command-and-control\n - attack.exfiltration\nlogsource:\n category: dns\n product: zeek\ndetection:\n selection:\n query|contains:\n - 'girisbot'\n - 'vergibot'\n - 'dekontbot'\n - 'cekimbot'\n condition: selection\nfalsepositives:\n - >-\n Turkish-language legitimate Telegram bots with similar role-suffix naming\n conventions \u2014 validate by correlating with web-server source IP and\n checking for concurrent USOM polling or V5VgjLU0jsDe admin path access\n - >-\n Security researchers probing BellaMain bot names for OSINT purposes\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-05-16T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--92110722-6ba7-5523-afaf-7f3dc75e4646", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.598941Z", "modified": "2026-06-14T11:55:43.598941Z", "name": "BellaMain PhaaS High-Frequency Multi-Bot Telegram Outbound", "indicator_types": [ "malicious-activity" ], "pattern": "title: BellaMain PhaaS High-Frequency Multi-Bot Telegram Outbound\nid: e5f2b847-3a1c-4d96-8e04-7c9d3f2a1b56\nstatus: test\ndescription: >-\n Detects a burst of five or more outbound HTTPS requests to\n api.telegram.org/bot* from a single source host within a 60-second window,\n indicating BellaMain's automated four-bot credential-exfil pipeline\n activating on a victim credential capture. BellaMain fires multiple\n specialized bots simultaneously on each credential hit: the admin bot\n receives the raw credential set, vergibot receives national-ID data, and\n dekontbot and cekimbot handle approval workflows. The resulting burst of\n outbound Telegram API calls to distinct bot-token URIs within a short\n window is a behavioral fingerprint of the PhaaS automation layer.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\nauthor: The Hunters Ledger\ndate: 2026/05/16\ntags:\n - attack.command-and-control\n - attack.exfiltration\n - attack.collection\nlogsource:\n category: proxy\n product: zeek\ndetection:\n selection:\n cs-host: 'api.telegram.org'\n cs-uri-stem|startswith: '/bot'\n timeframe: 60s\n condition: selection | count() by src_ip > 4\nfalsepositives:\n - >-\n Web application platforms with legitimate high-frequency Telegram\n notification integrations (e.g., e-commerce order-notification bots)\n firing on concurrent order events \u2014 tune threshold or scope to web-server\n segments not expected to run application-layer Telegram integrations\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-16T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1f44f0c9-646d-5512-8ff5-19e961ad71db", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.59907Z", "modified": "2026-06-14T11:55:43.59907Z", "name": "THL BellaMain PhaaS Admin Panel Path Access V5VgjLU0jsDe", "indicator_types": [ "malicious-activity" ], "pattern": "alert http any any -> $HTTP_SERVERS any (\n msg:\"THL BellaMain PhaaS Admin Panel Path Access V5VgjLU0jsDe\";\n flow:established,to_server;\n http.uri; content:\"/V5VgjLU0jsDe/\"; nocase;\n classtype:web-application-attack;\n sid:9001001;\n rev:1;\n metadata:\n author \"The Hunters Ledger\",\n date \"2026-05-16\",\n mitre_technique \"T1505.003\",\n reference \"https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\";\n)", "pattern_type": "suricata", "valid_from": "2026-05-16T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--84bff7ba-76be-569b-b54d-07866eae2763", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.599244Z", "modified": "2026-06-14T11:55:43.599244Z", "name": "THL BellaMain C2 Infrastructure TLS Connection to 79.137.192.3", "indicator_types": [ "malicious-activity" ], "pattern": "alert tls $HOME_NET any -> 79.137.192.3 any (\n msg:\"THL BellaMain C2 Infrastructure TLS Connection to 79.137.192.3\";\n flow:established,to_server;\n tls.sni; content:\"cryptone\"; nocase;\n classtype:trojan-activity;\n sid:9001002;\n rev:1;\n metadata:\n author \"The Hunters Ledger\",\n date \"2026-05-16\",\n mitre_technique \"T1071.001\",\n reference \"https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\";\n)", "pattern_type": "suricata", "valid_from": "2026-05-16T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--38abb5bc-fdee-53f7-8fef-a7828897c02d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.599386Z", "modified": "2026-06-14T11:55:43.599386Z", "name": "THL BellaMain C2 Infrastructure TLS Connection to 79.137.192.3 evotoptan SNI", "indicator_types": [ "malicious-activity" ], "pattern": "alert tls $HOME_NET any -> 79.137.192.3 any (\n msg:\"THL BellaMain C2 Infrastructure TLS Connection to 79.137.192.3 evotoptan SNI\";\n flow:established,to_server;\n tls.sni; content:\"evotoptan\"; nocase;\n classtype:trojan-activity;\n sid:9001003;\n rev:1;\n metadata:\n author \"The Hunters Ledger\",\n date \"2026-05-16\",\n mitre_technique \"T1071.001\",\n reference \"https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\";\n)", "pattern_type": "suricata", "valid_from": "2026-05-16T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3e1b762c-4b47-5405-96f0-00b4ee79b584", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.599549Z", "modified": "2026-06-14T11:55:43.599549Z", "name": "THL BellaMain PhaaS USOM Blocklist Poll from Web Server", "indicator_types": [ "malicious-activity" ], "pattern": "alert http $HOME_NET any -> any any (\n msg:\"THL BellaMain PhaaS USOM Blocklist Poll from Web Server\";\n flow:established,to_server;\n http.host; content:\"usom.gov.tr\"; endswith; nocase;\n http.uri; content:\"url-list.txt\"; nocase;\n threshold: type limit, track by_src, count 1, seconds 300;\n classtype:policy-violation;\n sid:9001004;\n rev:1;\n metadata:\n author \"The Hunters Ledger\",\n date \"2026-05-16\",\n mitre_technique \"T1518.001\",\n reference \"https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\";\n)", "pattern_type": "suricata", "valid_from": "2026-05-16T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--14947fc6-ba8e-5f99-bc46-05efd011413c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.599748Z", "modified": "2026-06-14T11:55:43.599748Z", "name": "THL BellaMain CryptOne Fake Exchange Domain DNS Query cryptone.bot", "indicator_types": [ "malicious-activity" ], "pattern": "alert dns $HOME_NET any -> any any (\n msg:\"THL BellaMain CryptOne Fake Exchange Domain DNS Query cryptone.bot\";\n flow:established;\n dns.query; content:\"cryptone.bot\"; endswith; nocase;\n classtype:trojan-activity;\n sid:9001005;\n rev:1;\n metadata:\n author \"The Hunters Ledger\",\n date \"2026-05-16\",\n mitre_technique \"T1071.001\",\n reference \"https://the-hunters-ledger.com/hunting-detections/bellamain-turkish-phaas-79-137-192-3-20260516-detections/\";\n)", "pattern_type": "suricata", "valid_from": "2026-05-16T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.600009Z", "modified": "2026-06-14T11:55:43.600009Z", "name": "BellaMain", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.600233Z", "modified": "2026-06-14T11:55:43.600233Z", "name": "BellaMain.zip", "description": "PhaaS panel backend \u2014 65 PHP files + 14 directories; first public disclosure", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.600465Z", "modified": "2026-06-14T11:55:43.600465Z", "name": "Dolap.rar", "description": "Dolap (Turkish secondhand marketplace) phishing kit", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.600711Z", "modified": "2026-06-14T11:55:43.600711Z", "name": "Kargo.rar", "description": "Yurtici Kargo (cargo tracking) phishing kit", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.600961Z", "modified": "2026-06-14T11:55:43.600961Z", "name": "Letgo.rar", "description": "Letgo (classifieds) phishing kit", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.601167Z", "modified": "2026-06-14T11:55:43.601167Z", "name": "Pttavm.rar", "description": "PTT AVM (postal e-commerce) phishing kit", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.601378Z", "modified": "2026-06-14T11:55:43.601378Z", "name": "sahibinden.rar", "description": "Sahibinden (classifieds / real estate) phishing kit", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.60158Z", "modified": "2026-06-14T11:55:43.60158Z", "name": "shopier.rar", "description": "Shopier (e-commerce) phishing kit", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.601795Z", "modified": "2026-06-14T11:55:43.601795Z", "name": "turkcell.rar", "description": "Turkcell (telecommunications) phishing kit", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.602047Z", "modified": "2026-06-14T11:55:43.602047Z", "name": "Acquire Infrastructure: Virtual Private Server", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1583/003", "external_id": "T1583.003" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d81b46ce-ef63-5c04-a945-180b77ff6da7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.60234Z", "modified": "2026-06-14T11:55:43.60234Z", "name": "Acquire Infrastructure: Domains", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1583/001", "external_id": "T1583.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0876da5f-998d-56c9-bcbe-39e02e92a674", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.602603Z", "modified": "2026-06-14T11:55:43.602603Z", "name": "Acquire Infrastructure: Web Services", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1583/006", "external_id": "T1583.006" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.602836Z", "modified": "2026-06-14T11:55:43.602836Z", "name": "Develop Capabilities: Malware", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1587/001", "external_id": "T1587.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.603055Z", "modified": "2026-06-14T11:55:43.603055Z", "name": "Establish Accounts: Social Media Accounts", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1585/001", "external_id": "T1585.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ffc8418f-0d81-521e-8a6a-53506f9db000", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.603563Z", "modified": "2026-06-14T11:55:43.603563Z", "name": "Establish Accounts: Email Accounts", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1585/002", "external_id": "T1585.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--9ded537c-42e2-5235-a25b-9e9e0ee0af8d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.603809Z", "modified": "2026-06-14T11:55:43.603809Z", "name": "Stage Capabilities: Link Target", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1608/005", "external_id": "T1608.005" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a4f95946-472a-5f0c-adff-9624066a10f1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.603974Z", "modified": "2026-06-14T11:55:43.603974Z", "name": "Phishing: Spearphishing Link", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1566/002", "external_id": "T1566.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--dbe27491-3e9e-59bf-a1dd-3fef78aa73ba", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.604156Z", "modified": "2026-06-14T11:55:43.604156Z", "name": "Impersonation", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1656", "external_id": "T1656" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.604409Z", "modified": "2026-06-14T11:55:43.604409Z", "name": "Command and Scripting Interpreter: Unix Shell", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1059/004", "external_id": "T1059.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fd8dd968-9ef8-5d44-9278-54e070789645", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.604597Z", "modified": "2026-06-14T11:55:43.604597Z", "name": "Server Software Component: Web Shell", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1505/003", "external_id": "T1505.003" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e2d2ee17-9433-5131-89da-04f3c8c87b74", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.605361Z", "modified": "2026-06-14T11:55:43.605361Z", "name": "Obfuscated Files or Information: Encrypted/Encoded File", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1027/013", "external_id": "T1027.013" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.605607Z", "modified": "2026-06-14T11:55:43.605607Z", "name": "Masquerading: Match Legitimate Resource Name or Location", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1036/005", "external_id": "T1036.005" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.605844Z", "modified": "2026-06-14T11:55:43.605844Z", "name": "Execution Guardrails", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1480", "external_id": "T1480" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.606074Z", "modified": "2026-06-14T11:55:43.606074Z", "name": "Virtualization / Sandbox Evasion (anti-research variant)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1497", "external_id": "T1497" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--4d78476e-e20d-514e-afd4-b91af65314cc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.606312Z", "modified": "2026-06-14T11:55:43.606312Z", "name": "Indicator Removal", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1070", "external_id": "T1070" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--67cee5b2-7970-5505-949d-f0b9a6c1c4bf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.606555Z", "modified": "2026-06-14T11:55:43.606555Z", "name": "Indicator Removal: File Deletion", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1070/004", "external_id": "T1070.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7b60982f-6974-55b6-870d-c84330403c90", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.606825Z", "modified": "2026-06-14T11:55:43.606825Z", "name": "Input Capture", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1056", "external_id": "T1056" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--9b524163-9d48-5d23-92db-27ab61e7c879", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.607146Z", "modified": "2026-06-14T11:55:43.607146Z", "name": "Gather Victim Identity Information: Credentials", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1589/001", "external_id": "T1589.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.607398Z", "modified": "2026-06-14T11:55:43.607398Z", "name": "Software Discovery: Security Software", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1518/001", "external_id": "T1518.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d6b8aa8c-cfd9-5f42-a8ac-2573005abb2f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.607624Z", "modified": "2026-06-14T11:55:43.607624Z", "name": "Automated Collection", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1119", "external_id": "T1119" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--556aeba8-d3dc-5015-b934-460dc239d73c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.607857Z", "modified": "2026-06-14T11:55:43.607857Z", "name": "Archive Collected Data", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1560", "external_id": "T1560" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.608086Z", "modified": "2026-06-14T11:55:43.608086Z", "name": "Application Layer Protocol: Web Protocols", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1071/001", "external_id": "T1071.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.608313Z", "modified": "2026-06-14T11:55:43.608313Z", "name": "Web Service: Bidirectional Communication", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1102/002", "external_id": "T1102.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--351c2bb8-092f-5863-b623-f9ca08b16432", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.60853Z", "modified": "2026-06-14T11:55:43.60853Z", "name": "Web Service", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1102", "external_id": "T1102" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.608858Z", "modified": "2026-06-14T11:55:43.608858Z", "name": "Remote Access Software", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1219", "external_id": "T1219" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.609579Z", "modified": "2026-06-14T11:55:43.609579Z", "name": "Exfiltration Over C2 Channel", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1041", "external_id": "T1041" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.610058Z", "modified": "2026-06-14T11:55:43.610058Z", "name": "Exfiltration to Cloud Storage", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1567/002", "external_id": "T1567.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8e773df3-b3cc-54bd-83db-4028fe946d79", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.610306Z", "modified": "2026-06-14T11:55:43.610306Z", "name": "Financial Theft", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1657", "external_id": "T1657" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2897b2f1-408a-5653-857f-ba8d519a3780", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.61054Z", "modified": "2026-06-14T11:55:43.61054Z", "name": "Data Destruction (operator anti-forensics on own data)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1485", "external_id": "T1485" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--dac325a3-34f0-5333-9f2c-ca30f04caa6a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.611136Z", "modified": "2026-06-14T11:55:43.611136Z", "name": "bellamain-turkish-phaas-79-137-192-3-20260516 infrastructure", "infrastructure_types": [ "command-and-control", "hosting" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f6ab5005-45e3-5869-90e6-a1a819e02a43", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.613504Z", "modified": "2026-06-14T11:55:43.613504Z", "relationship_type": "indicates", "source_ref": "indicator--7687fd58-e250-5606-b2b3-2f3f8e5c319a", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e8ae171e-671d-5316-8db8-6b4d0d96cedc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.614218Z", "modified": "2026-06-14T11:55:43.614218Z", "relationship_type": "indicates", "source_ref": "indicator--8482362e-4a99-5a1f-afff-bbef1d84ad86", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--23bc578d-dfcb-5e85-84e8-e9ad3846a910", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.61439Z", "modified": "2026-06-14T11:55:43.61439Z", "relationship_type": "indicates", "source_ref": "indicator--cdbc6d22-5f04-5e08-816c-7d866d05d23e", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53f5b737-5e06-5973-b83c-f20db713bcbc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.614517Z", "modified": "2026-06-14T11:55:43.614517Z", "relationship_type": "indicates", "source_ref": "indicator--ac2e78ac-a9b0-5ee4-af5c-a50261a7c5fd", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--300d0b8d-ca34-5752-919b-ee50a355acb1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.61463Z", "modified": "2026-06-14T11:55:43.61463Z", "relationship_type": "indicates", "source_ref": "indicator--5ab6d935-38b3-5d7a-9935-a1511db09cce", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--83385fa7-acd6-5ab5-aa13-39c647e561df", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.614758Z", "modified": "2026-06-14T11:55:43.614758Z", "relationship_type": "indicates", "source_ref": "indicator--e5a1586a-793d-5af6-be39-26bd588397e2", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f2fafb06-c6b6-5ba6-9024-8a267daeadfc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.6149Z", "modified": "2026-06-14T11:55:43.6149Z", "relationship_type": "indicates", "source_ref": "indicator--2d0dde9d-b206-53b3-970f-cabb56a56798", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b482a29a-9b34-5de5-9dc8-f1fa55c9bde9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.615038Z", "modified": "2026-06-14T11:55:43.615038Z", "relationship_type": "indicates", "source_ref": "indicator--85e3e5ed-23b4-5a03-8549-49ed50b2b3ad", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e8a1b71-623f-5560-ae20-3af901d20f1f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.615165Z", "modified": "2026-06-14T11:55:43.615165Z", "relationship_type": "indicates", "source_ref": "indicator--0893edb6-299b-5a34-b8f0-968d93022caf", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7b45ba39-7abc-5c12-8cf3-c77b55e96e32", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.615303Z", "modified": "2026-06-14T11:55:43.615303Z", "relationship_type": "indicates", "source_ref": "indicator--ad7126bf-a3d8-52cc-bef2-ebd1f25912ae", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--98f8fc16-7e64-5f60-944f-e8f9e2b83f7b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.615438Z", "modified": "2026-06-14T11:55:43.615438Z", "relationship_type": "indicates", "source_ref": "indicator--6ea87d8f-b64a-5056-bedb-8a4cb23b4eaa", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1440d0ba-a5db-5c63-b340-1a6063a67584", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.615853Z", "modified": "2026-06-14T11:55:43.615853Z", "relationship_type": "indicates", "source_ref": "indicator--a91be888-c519-535f-9ffc-5fce3143a387", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--813c0fdd-14e0-52cb-b247-87d754522902", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.616047Z", "modified": "2026-06-14T11:55:43.616047Z", "relationship_type": "indicates", "source_ref": "indicator--0bdd4f90-17e2-5af9-a648-4ae6bd76f23a", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97d0b65c-e548-5d98-a357-6fac56106085", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.616224Z", "modified": "2026-06-14T11:55:43.616224Z", "relationship_type": "indicates", "source_ref": "indicator--f93c9e10-f908-557b-a878-a64dc1b8f2ed", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b91aa251-da40-5e94-946a-4ea2fe5d9dd8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.616394Z", "modified": "2026-06-14T11:55:43.616394Z", "relationship_type": "indicates", "source_ref": "indicator--cb1ced5e-8ce2-5a01-bcd8-c67bfa2749db", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--be1c34e8-4558-5887-871a-d9eebfeecaf7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.616552Z", "modified": "2026-06-14T11:55:43.616552Z", "relationship_type": "indicates", "source_ref": "indicator--6a921d96-534d-59fd-a6a7-1423dfe3c1f4", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6bf5b480-a3a0-5a50-a424-aeee0bea4302", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.616697Z", "modified": "2026-06-14T11:55:43.616697Z", "relationship_type": "indicates", "source_ref": "indicator--4652c8d4-2fc6-505a-8a87-f4ebc56946fc", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb13a32d-2765-5e73-97d8-fd1b24506a0e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.616889Z", "modified": "2026-06-14T11:55:43.616889Z", "relationship_type": "indicates", "source_ref": "indicator--835e7fcb-cb7b-5047-8f2f-d850274c7d89", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e8033d60-21cc-5859-81ca-6811329a3772", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.617045Z", "modified": "2026-06-14T11:55:43.617045Z", "relationship_type": "indicates", "source_ref": "indicator--bd978fd0-3b2c-5b6e-8869-8924c118e535", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--238e69e0-e581-5b1e-980c-4259d41e2959", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.617197Z", "modified": "2026-06-14T11:55:43.617197Z", "relationship_type": "indicates", "source_ref": "indicator--e2c286a6-ce86-59e3-995c-a641f07be090", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4a9f24df-e041-55fd-ac43-fd06a9f3a256", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.617374Z", "modified": "2026-06-14T11:55:43.617374Z", "relationship_type": "indicates", "source_ref": "indicator--61ea88ab-de01-5937-b2a8-98c1e7a5065f", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b2ffb18-005b-5c8c-9a77-a242fcf91b22", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.617567Z", "modified": "2026-06-14T11:55:43.617567Z", "relationship_type": "indicates", "source_ref": "indicator--1d2ea644-0f79-5602-b8d4-aaa50d2e426c", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--39ec1721-185b-57cb-b48a-2516f93821b5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.617777Z", "modified": "2026-06-14T11:55:43.617777Z", "relationship_type": "indicates", "source_ref": "indicator--445fca4a-c9b7-5d08-b36b-4eeb85e5d0c3", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48e630d3-7522-5806-8c50-27fcef15c8d2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.617969Z", "modified": "2026-06-14T11:55:43.617969Z", "relationship_type": "indicates", "source_ref": "indicator--5cc83de1-db8a-5de5-b5b5-469b64245206", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8ae9b58-c71f-5cb6-9f23-251857c02c4e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.61816Z", "modified": "2026-06-14T11:55:43.61816Z", "relationship_type": "indicates", "source_ref": "indicator--1661a35a-7708-5274-ada2-af503f2db671", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e9210d6c-f0bb-53ff-938b-5a09d666468e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.618361Z", "modified": "2026-06-14T11:55:43.618361Z", "relationship_type": "indicates", "source_ref": "indicator--92110722-6ba7-5523-afaf-7f3dc75e4646", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--396666c1-bf0c-5a0b-986b-22ab3aef3730", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.618554Z", "modified": "2026-06-14T11:55:43.618554Z", "relationship_type": "indicates", "source_ref": "indicator--1f44f0c9-646d-5512-8ff5-19e961ad71db", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a280b7c7-05e5-5c17-8f99-af8f059e73bd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.618746Z", "modified": "2026-06-14T11:55:43.618746Z", "relationship_type": "indicates", "source_ref": "indicator--84bff7ba-76be-569b-b54d-07866eae2763", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--00cfa385-e21f-5d78-b030-6d201713d9bf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.618953Z", "modified": "2026-06-14T11:55:43.618953Z", "relationship_type": "indicates", "source_ref": "indicator--38abb5bc-fdee-53f7-8fef-a7828897c02d", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--66f9f995-888b-5b11-ab14-55adcb53990f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.619121Z", "modified": "2026-06-14T11:55:43.619121Z", "relationship_type": "indicates", "source_ref": "indicator--3e1b762c-4b47-5405-96f0-00b4ee79b584", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c23a323-f746-5013-924c-afea62281c5d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.619287Z", "modified": "2026-06-14T11:55:43.619287Z", "relationship_type": "indicates", "source_ref": "indicator--14947fc6-ba8e-5f99-bc46-05efd011413c", "target_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f82c10a5-a0f6-5b06-8d4b-c96d5f7849db", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.619427Z", "modified": "2026-06-14T11:55:43.619427Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fde00f73-d632-528b-aea5-9d6cbd5c0220", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.61959Z", "modified": "2026-06-14T11:55:43.61959Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--d81b46ce-ef63-5c04-a945-180b77ff6da7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--666009b0-19f1-5d42-a1e2-e510fb664dcb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.619757Z", "modified": "2026-06-14T11:55:43.619757Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--0876da5f-998d-56c9-bcbe-39e02e92a674", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64d1b505-62cc-5c1e-a36a-8233ce2430b1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.619919Z", "modified": "2026-06-14T11:55:43.619919Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa0bf56f-0c58-5789-80d6-ba793fbac266", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.620114Z", "modified": "2026-06-14T11:55:43.620114Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c73cca17-733d-55ba-9aa9-279ea43f2c1b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.620296Z", "modified": "2026-06-14T11:55:43.620296Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--ffc8418f-0d81-521e-8a6a-53506f9db000", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--246f9ffb-e446-5c28-a8ff-e2cd61268570", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.620663Z", "modified": "2026-06-14T11:55:43.620663Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--9ded537c-42e2-5235-a25b-9e9e0ee0af8d", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3a6d008d-6fc3-547f-bc09-ce93088f175d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.620883Z", "modified": "2026-06-14T11:55:43.620883Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--a4f95946-472a-5f0c-adff-9624066a10f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31a7a15f-ee72-5ff4-82a6-9c20e236250d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.621079Z", "modified": "2026-06-14T11:55:43.621079Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--dbe27491-3e9e-59bf-a1dd-3fef78aa73ba", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--34d03ff6-4e80-5deb-8321-c05492d55b71", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.621274Z", "modified": "2026-06-14T11:55:43.621274Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--071ce205-a32f-5e0e-bfde-f35c7f75a456", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.621496Z", "modified": "2026-06-14T11:55:43.621496Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--fd8dd968-9ef8-5d44-9278-54e070789645", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--83bc22c2-bf1f-5c80-b91f-3252793a4b35", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.621692Z", "modified": "2026-06-14T11:55:43.621692Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--e2d2ee17-9433-5131-89da-04f3c8c87b74", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--65a0c8ed-5906-560e-b2a7-d428976f3687", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.621887Z", "modified": "2026-06-14T11:55:43.621887Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--45d6a6c1-0e07-5e63-b2f3-b52020722907", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.62209Z", "modified": "2026-06-14T11:55:43.62209Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9df15c5-8003-5527-a4f3-846c693327d8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.622276Z", "modified": "2026-06-14T11:55:43.622276Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dbbd4729-cf15-5942-955d-ce1d11f2352b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.622458Z", "modified": "2026-06-14T11:55:43.622458Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--4d78476e-e20d-514e-afd4-b91af65314cc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d60bd9f2-1321-50e2-8c8c-e680eb8ddd3d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.622659Z", "modified": "2026-06-14T11:55:43.622659Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--67cee5b2-7970-5505-949d-f0b9a6c1c4bf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ceba112a-6a3b-50ff-994c-7b996c2de79b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.622877Z", "modified": "2026-06-14T11:55:43.622877Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--7b60982f-6974-55b6-870d-c84330403c90", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b0c5a3d-6d57-579f-b95d-c183f0466c03", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.623156Z", "modified": "2026-06-14T11:55:43.623156Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--9b524163-9d48-5d23-92db-27ab61e7c879", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5f28825-bee6-550c-b2c3-7cb65b99d905", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.623363Z", "modified": "2026-06-14T11:55:43.623363Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa915999-2a77-5967-afd2-fafc712325ad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.623561Z", "modified": "2026-06-14T11:55:43.623561Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--d6b8aa8c-cfd9-5f42-a8ac-2573005abb2f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa7fa1dc-35ba-5e85-93a4-c746c295b8a8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.623753Z", "modified": "2026-06-14T11:55:43.623753Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--556aeba8-d3dc-5015-b934-460dc239d73c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--884e5f95-0ba5-5e9a-9ec3-c3cb69c59440", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.623936Z", "modified": "2026-06-14T11:55:43.623936Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--34860b2d-6314-5051-b05c-63e509052e8b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.624137Z", "modified": "2026-06-14T11:55:43.624137Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f867d978-bd27-5e7a-9f62-b172a69b2e5c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.624414Z", "modified": "2026-06-14T11:55:43.624414Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--351c2bb8-092f-5863-b623-f9ca08b16432", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--594d3cdd-97b3-5050-824b-27c0aba74323", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.624638Z", "modified": "2026-06-14T11:55:43.624638Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9b1a9b4-7e16-5cb8-80bb-2097e8e80831", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.624836Z", "modified": "2026-06-14T11:55:43.624836Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e19699cd-e152-5a91-9293-72e93c859e73", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.625008Z", "modified": "2026-06-14T11:55:43.625008Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--737eb46d-d2a2-5e13-85e5-85b414ef2a98", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.625157Z", "modified": "2026-06-14T11:55:43.625157Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--8e773df3-b3cc-54bd-83db-4028fe946d79", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d7650953-88e2-53dc-9f7e-60a48b65f994", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.625266Z", "modified": "2026-06-14T11:55:43.625266Z", "relationship_type": "uses", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "attack-pattern--2897b2f1-408a-5653-857f-ba8d519a3780", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1eefb89f-fcdb-515f-b158-de0048e08b9c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.625382Z", "modified": "2026-06-14T11:55:43.625382Z", "relationship_type": "communicates-with", "source_ref": "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "target_ref": "infrastructure--dac325a3-34f0-5333-9f2c-ca30f04caa6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--23b726ca-4e75-5cf6-a6cc-2962d04656cd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.625503Z", "modified": "2026-06-14T11:55:43.625503Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--34aef240-a130-5a1d-9755-417f2904d494", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.625614Z", "modified": "2026-06-14T11:55:43.625614Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--d81b46ce-ef63-5c04-a945-180b77ff6da7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4df2e08-b799-5834-90c7-0d2264bac5f6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.625727Z", "modified": "2026-06-14T11:55:43.625727Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--0876da5f-998d-56c9-bcbe-39e02e92a674", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e34fd8f-19ad-5aa0-94df-faabcd460439", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.625908Z", "modified": "2026-06-14T11:55:43.625908Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--395a75f4-9e00-5caa-9cb2-bb5a3b649827", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.626149Z", "modified": "2026-06-14T11:55:43.626149Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2502c19-6a64-5ff4-aa50-50c4a3396c11", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.626422Z", "modified": "2026-06-14T11:55:43.626422Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--ffc8418f-0d81-521e-8a6a-53506f9db000", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a89972a0-0c9f-5343-98a2-fc673752216d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.626579Z", "modified": "2026-06-14T11:55:43.626579Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--9ded537c-42e2-5235-a25b-9e9e0ee0af8d", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08ef9ef8-91c2-5082-9ff0-260ecf8551d5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.626723Z", "modified": "2026-06-14T11:55:43.626723Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--a4f95946-472a-5f0c-adff-9624066a10f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eb7544dd-4baa-5176-ad0d-609c3537a5e6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.626885Z", "modified": "2026-06-14T11:55:43.626885Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--dbe27491-3e9e-59bf-a1dd-3fef78aa73ba", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b345ae44-2cdd-51ac-bd8f-5586f5aa3ab5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.627029Z", "modified": "2026-06-14T11:55:43.627029Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7f26aaa7-a8ae-5457-9ff5-40fab389d68d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.627205Z", "modified": "2026-06-14T11:55:43.627205Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--fd8dd968-9ef8-5d44-9278-54e070789645", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--879941e0-4ea3-59c7-afe6-b6aff776a31b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.627384Z", "modified": "2026-06-14T11:55:43.627384Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--e2d2ee17-9433-5131-89da-04f3c8c87b74", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cad8cc25-d383-57bf-bcb4-427dd4634fa6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.627525Z", "modified": "2026-06-14T11:55:43.627525Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fae65d52-1d67-551f-8a43-3889b469eeb7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.627685Z", "modified": "2026-06-14T11:55:43.627685Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa631a21-9b9f-54dc-b161-2765d5895f40", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.627841Z", "modified": "2026-06-14T11:55:43.627841Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b888a1af-9fe5-52ab-a412-3a99b99f0ea0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.627987Z", "modified": "2026-06-14T11:55:43.627987Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--4d78476e-e20d-514e-afd4-b91af65314cc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c5e8d6c9-2e02-5cb7-8fd3-2d3f969c45cf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.628165Z", "modified": "2026-06-14T11:55:43.628165Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--67cee5b2-7970-5505-949d-f0b9a6c1c4bf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4b07b277-f6b8-5326-b2c8-086eaa08a295", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.628345Z", "modified": "2026-06-14T11:55:43.628345Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--7b60982f-6974-55b6-870d-c84330403c90", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f11e2d48-99c2-581d-b316-2f38dba98d52", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.628521Z", "modified": "2026-06-14T11:55:43.628521Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--9b524163-9d48-5d23-92db-27ab61e7c879", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a0f95f28-b733-59d2-b761-2fdb82a5a7bb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.628705Z", "modified": "2026-06-14T11:55:43.628705Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c0bbe169-1b44-53d3-87fa-fab170c094e0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.628849Z", "modified": "2026-06-14T11:55:43.628849Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--d6b8aa8c-cfd9-5f42-a8ac-2573005abb2f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d6283efb-049c-51b6-aedf-58526a415314", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.629023Z", "modified": "2026-06-14T11:55:43.629023Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--556aeba8-d3dc-5015-b934-460dc239d73c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48c93c79-4353-55cb-bed7-00f748241d45", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.629157Z", "modified": "2026-06-14T11:55:43.629157Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b434d3e-1b21-5c3d-b07f-61951efe43f4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.629329Z", "modified": "2026-06-14T11:55:43.629329Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de572844-0b3e-5574-9db5-451a8ae15403", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.629511Z", "modified": "2026-06-14T11:55:43.629511Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--351c2bb8-092f-5863-b623-f9ca08b16432", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f046aea8-cab3-5a64-8e51-332b1dc9c274", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.62996Z", "modified": "2026-06-14T11:55:43.62996Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--382c242d-e809-56f6-9225-a79d8bf56383", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.631411Z", "modified": "2026-06-14T11:55:43.631411Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8cfc204f-0511-59e0-b9f7-df3ab2e1762d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.631654Z", "modified": "2026-06-14T11:55:43.631654Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8b74163-2a40-5139-8ec1-a3e20379fdae", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.631851Z", "modified": "2026-06-14T11:55:43.631851Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--8e773df3-b3cc-54bd-83db-4028fe946d79", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40d5e142-b1e8-5bba-a7a8-23fad00b06b9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.632041Z", "modified": "2026-06-14T11:55:43.632041Z", "relationship_type": "uses", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "attack-pattern--2897b2f1-408a-5653-857f-ba8d519a3780", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8097592d-b4a0-55a2-988f-495fe3e2882b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.632243Z", "modified": "2026-06-14T11:55:43.632243Z", "relationship_type": "communicates-with", "source_ref": "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "target_ref": "infrastructure--dac325a3-34f0-5333-9f2c-ca30f04caa6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f847b750-3e6a-5c1f-a56c-4dbab4b99e09", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.632449Z", "modified": "2026-06-14T11:55:43.632449Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1d01bd76-6d34-5179-82f7-35e419f18881", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.632625Z", "modified": "2026-06-14T11:55:43.632625Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--d81b46ce-ef63-5c04-a945-180b77ff6da7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c79b04e5-ca19-5579-b756-6cb0ccc688f4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.632825Z", "modified": "2026-06-14T11:55:43.632825Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--0876da5f-998d-56c9-bcbe-39e02e92a674", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--56f0223b-c018-5db0-9024-c5d129d3a24c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.633048Z", "modified": "2026-06-14T11:55:43.633048Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5b3eef3-4da3-5854-9035-89041f8f0c86", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.633271Z", "modified": "2026-06-14T11:55:43.633271Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f2d3796-5eb7-501a-9a99-ebedaf2f0cf4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.633664Z", "modified": "2026-06-14T11:55:43.633664Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--ffc8418f-0d81-521e-8a6a-53506f9db000", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9d48cf39-99cb-5026-89d0-7a00d1d99c13", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.633884Z", "modified": "2026-06-14T11:55:43.633884Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--9ded537c-42e2-5235-a25b-9e9e0ee0af8d", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e3c760f-fdd1-5af8-a992-95423068b4b2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.634071Z", "modified": "2026-06-14T11:55:43.634071Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--a4f95946-472a-5f0c-adff-9624066a10f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9f9d9f31-694e-5230-8235-d082b598149c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.634253Z", "modified": "2026-06-14T11:55:43.634253Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--dbe27491-3e9e-59bf-a1dd-3fef78aa73ba", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7b1117ef-9303-56bf-a872-c854fdeae338", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.634434Z", "modified": "2026-06-14T11:55:43.634434Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6452cacd-4d91-5124-bc62-3bc7f787521e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.634645Z", "modified": "2026-06-14T11:55:43.634645Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--fd8dd968-9ef8-5d44-9278-54e070789645", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01fbdeb0-4643-5023-b1e4-b47f6a2d4153", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.634853Z", "modified": "2026-06-14T11:55:43.634853Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--e2d2ee17-9433-5131-89da-04f3c8c87b74", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d228c0bf-9f32-54c4-9a2f-36f763e07917", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.635379Z", "modified": "2026-06-14T11:55:43.635379Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d6b78bd9-f2dc-5c4d-aa31-40c2ef5e4224", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.635591Z", "modified": "2026-06-14T11:55:43.635591Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a85ddd75-acd4-5e5c-b703-8b232eee9aa3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.635795Z", "modified": "2026-06-14T11:55:43.635795Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2412fd26-6fb2-53f4-a883-82cb37a50439", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.636003Z", "modified": "2026-06-14T11:55:43.636003Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--4d78476e-e20d-514e-afd4-b91af65314cc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--95cd8d29-2956-57cd-abc4-82f0911582b6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.636197Z", "modified": "2026-06-14T11:55:43.636197Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--67cee5b2-7970-5505-949d-f0b9a6c1c4bf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a3c04f7-bc34-514b-a1cf-6ca4e50ba9fe", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.636416Z", "modified": "2026-06-14T11:55:43.636416Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--7b60982f-6974-55b6-870d-c84330403c90", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6b57847-107d-5f07-8804-29e240327dc0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.636543Z", "modified": "2026-06-14T11:55:43.636543Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--9b524163-9d48-5d23-92db-27ab61e7c879", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6476215-8531-5bd0-be18-198f7251e321", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.636654Z", "modified": "2026-06-14T11:55:43.636654Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--348ba89a-1cca-5efb-b480-0e6d963eef80", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.636759Z", "modified": "2026-06-14T11:55:43.636759Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--d6b8aa8c-cfd9-5f42-a8ac-2573005abb2f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--52bf2151-af7f-51ee-87dc-3d43f239bcf5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.636896Z", "modified": "2026-06-14T11:55:43.636896Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--556aeba8-d3dc-5015-b934-460dc239d73c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f7e6482-79f4-5ab0-89c7-bc20fbe913b2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.637376Z", "modified": "2026-06-14T11:55:43.637376Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96ef48a4-82bd-5391-b1e8-78ec9834263e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.637581Z", "modified": "2026-06-14T11:55:43.637581Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d855788-8686-5a38-badf-a98f396ca64e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.637768Z", "modified": "2026-06-14T11:55:43.637768Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--351c2bb8-092f-5863-b623-f9ca08b16432", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2608778f-2351-5db8-858c-fc36fa7f530c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.637947Z", "modified": "2026-06-14T11:55:43.637947Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--372eed08-816c-5724-8c3f-460c0461828c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.638238Z", "modified": "2026-06-14T11:55:43.638238Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--69562eb5-d2b8-5c93-9261-439bd767dbc6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.638583Z", "modified": "2026-06-14T11:55:43.638583Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9dd807a-315d-599d-b152-4730cc62faf4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.638774Z", "modified": "2026-06-14T11:55:43.638774Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--8e773df3-b3cc-54bd-83db-4028fe946d79", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c79efbda-284b-537d-a443-ea4ae03faf22", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.638934Z", "modified": "2026-06-14T11:55:43.638934Z", "relationship_type": "uses", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "attack-pattern--2897b2f1-408a-5653-857f-ba8d519a3780", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c0dfda7d-791c-5b1f-9de9-f7a5b43cf1b2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.639137Z", "modified": "2026-06-14T11:55:43.639137Z", "relationship_type": "communicates-with", "source_ref": "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "target_ref": "infrastructure--dac325a3-34f0-5333-9f2c-ca30f04caa6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--598c1d24-d27e-56a7-96fb-5b9bc1d02185", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.639363Z", "modified": "2026-06-14T11:55:43.639363Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--22868fda-cf0e-55ec-a5eb-0908b28ce015", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.639537Z", "modified": "2026-06-14T11:55:43.639537Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--d81b46ce-ef63-5c04-a945-180b77ff6da7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8b970f5d-f705-536c-954e-4da874f3dabd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.639701Z", "modified": "2026-06-14T11:55:43.639701Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--0876da5f-998d-56c9-bcbe-39e02e92a674", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47955a7b-b402-5351-91af-8dfb86df6e8b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.640021Z", "modified": "2026-06-14T11:55:43.640021Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08da5b33-fca9-5068-9344-2422d7a738c2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.64021Z", "modified": "2026-06-14T11:55:43.64021Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08a18f33-6308-5a26-bf9e-226dd643f5eb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.640944Z", "modified": "2026-06-14T11:55:43.640944Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--ffc8418f-0d81-521e-8a6a-53506f9db000", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2ee5f4f-d90d-5c24-a34a-937acdb9262a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.641225Z", "modified": "2026-06-14T11:55:43.641225Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--9ded537c-42e2-5235-a25b-9e9e0ee0af8d", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5256d77-062a-5145-bc1d-f470f0df4470", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.641434Z", "modified": "2026-06-14T11:55:43.641434Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--a4f95946-472a-5f0c-adff-9624066a10f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--275f98c3-6e66-525a-aa21-86a237af9538", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.641623Z", "modified": "2026-06-14T11:55:43.641623Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--dbe27491-3e9e-59bf-a1dd-3fef78aa73ba", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc5470ba-96ce-524a-9b7b-2b1211178e6d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.641831Z", "modified": "2026-06-14T11:55:43.641831Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a63b0589-cefc-51e3-80ff-cb29d1a0ab07", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.642022Z", "modified": "2026-06-14T11:55:43.642022Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--fd8dd968-9ef8-5d44-9278-54e070789645", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2bd00dfb-3232-5d8e-a63d-a30aab908d11", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.642211Z", "modified": "2026-06-14T11:55:43.642211Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--e2d2ee17-9433-5131-89da-04f3c8c87b74", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f0ceeb4-a760-5d90-9b33-320b5e1ee946", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.642433Z", "modified": "2026-06-14T11:55:43.642433Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bef864b8-3863-554b-9005-8531502baa3f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.642648Z", "modified": "2026-06-14T11:55:43.642648Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dce3148c-a52e-5ac6-bac5-87fe3965f98f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.642868Z", "modified": "2026-06-14T11:55:43.642868Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--216dd7e6-fcd9-5f0d-8cfb-36949573cece", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.643073Z", "modified": "2026-06-14T11:55:43.643073Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--4d78476e-e20d-514e-afd4-b91af65314cc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8d096d27-a405-5c83-9221-fb0a1fee27b4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.643261Z", "modified": "2026-06-14T11:55:43.643261Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--67cee5b2-7970-5505-949d-f0b9a6c1c4bf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe631bf8-83e1-55b3-8fe5-d21a0e86a0e4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.643455Z", "modified": "2026-06-14T11:55:43.643455Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--7b60982f-6974-55b6-870d-c84330403c90", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49fb9e43-7636-5245-93de-e030f0293ced", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.643641Z", "modified": "2026-06-14T11:55:43.643641Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--9b524163-9d48-5d23-92db-27ab61e7c879", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--26a5f4f9-9005-5f0f-9898-734c4e1fdc9b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.643834Z", "modified": "2026-06-14T11:55:43.643834Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6d71c35e-a8d6-58e5-9c92-04010ecaf4f1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.644018Z", "modified": "2026-06-14T11:55:43.644018Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--d6b8aa8c-cfd9-5f42-a8ac-2573005abb2f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--776bcad4-62cf-5963-8f1b-467a782d616b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.644208Z", "modified": "2026-06-14T11:55:43.644208Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--556aeba8-d3dc-5015-b934-460dc239d73c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f93047c5-0d75-542f-a628-bae651cecfd0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.644523Z", "modified": "2026-06-14T11:55:43.644523Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2a6e7909-88cf-5deb-8d37-cb6ee1a97dec", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.644747Z", "modified": "2026-06-14T11:55:43.644747Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92323b1e-bb30-502e-bbdf-58d68bb91d82", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.644966Z", "modified": "2026-06-14T11:55:43.644966Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--351c2bb8-092f-5863-b623-f9ca08b16432", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--adda8b32-2c78-5870-aaf2-eb763c0ce1b0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.645152Z", "modified": "2026-06-14T11:55:43.645152Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c2ee165-6bef-54f8-8a3a-e8378089f10e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.645281Z", "modified": "2026-06-14T11:55:43.645281Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--83006afa-2aed-51e8-9e4e-6327f41d7611", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.645506Z", "modified": "2026-06-14T11:55:43.645506Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--15b08f55-f800-550d-8ba2-615564610399", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.645717Z", "modified": "2026-06-14T11:55:43.645717Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--8e773df3-b3cc-54bd-83db-4028fe946d79", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--634b1999-030e-5118-bb55-38089e20e438", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.645907Z", "modified": "2026-06-14T11:55:43.645907Z", "relationship_type": "uses", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "attack-pattern--2897b2f1-408a-5653-857f-ba8d519a3780", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ac2f7288-8d66-586d-a980-b80bc1e23976", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.646122Z", "modified": "2026-06-14T11:55:43.646122Z", "relationship_type": "communicates-with", "source_ref": "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "target_ref": "infrastructure--dac325a3-34f0-5333-9f2c-ca30f04caa6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--22ee333f-1e25-53df-bafc-14d9cc057a57", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.646521Z", "modified": "2026-06-14T11:55:43.646521Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--98389ce9-9c67-5fac-9cc9-980bbf3150a2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.646808Z", "modified": "2026-06-14T11:55:43.646808Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--d81b46ce-ef63-5c04-a945-180b77ff6da7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9cce2e1f-5654-5a53-81f5-10436b2fa42e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.647191Z", "modified": "2026-06-14T11:55:43.647191Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--0876da5f-998d-56c9-bcbe-39e02e92a674", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e9e926c-d3f8-5e52-817f-79a9b7597d32", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.64737Z", "modified": "2026-06-14T11:55:43.64737Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--36f76b54-3d48-5b1d-8c81-7a2b26d9e862", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.647557Z", "modified": "2026-06-14T11:55:43.647557Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--55413027-ed04-5838-a376-8ea3bcf9c097", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.647829Z", "modified": "2026-06-14T11:55:43.647829Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--ffc8418f-0d81-521e-8a6a-53506f9db000", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--46c89107-123c-587f-a74e-bf9ad011aa35", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.647996Z", "modified": "2026-06-14T11:55:43.647996Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--9ded537c-42e2-5235-a25b-9e9e0ee0af8d", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4eb83902-2b82-5f14-9c74-5724b6074b86", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.64816Z", "modified": "2026-06-14T11:55:43.64816Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--a4f95946-472a-5f0c-adff-9624066a10f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f3b45070-b12a-5ebf-b707-a83f9a72dc82", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.648321Z", "modified": "2026-06-14T11:55:43.648321Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--dbe27491-3e9e-59bf-a1dd-3fef78aa73ba", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2fc70748-7bec-563b-be36-1b10cbe0c020", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.648493Z", "modified": "2026-06-14T11:55:43.648493Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0c96c22f-125d-5dc2-8a47-5cf1fb9d863e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.648661Z", "modified": "2026-06-14T11:55:43.648661Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--fd8dd968-9ef8-5d44-9278-54e070789645", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c0c5f118-be21-5832-84d5-9fc343a7a713", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.648835Z", "modified": "2026-06-14T11:55:43.648835Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--e2d2ee17-9433-5131-89da-04f3c8c87b74", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7dfd9ba9-bc98-5d49-9319-f7489cb7d9e2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.649037Z", "modified": "2026-06-14T11:55:43.649037Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6311ccee-6368-5a06-85d3-e095439639ec", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.649228Z", "modified": "2026-06-14T11:55:43.649228Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b9230f24-042a-5a82-a94b-eb0509a6e7a2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.649417Z", "modified": "2026-06-14T11:55:43.649417Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--403d00a3-b18c-5b4b-b2b2-f4f01859b577", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.64959Z", "modified": "2026-06-14T11:55:43.64959Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--4d78476e-e20d-514e-afd4-b91af65314cc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2dc035f6-ca46-5a78-827c-9fea268ee4b0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.649761Z", "modified": "2026-06-14T11:55:43.649761Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--67cee5b2-7970-5505-949d-f0b9a6c1c4bf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--22d92b0a-f0f9-519f-b359-4c4b2d5cd4e9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.650441Z", "modified": "2026-06-14T11:55:43.650441Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--7b60982f-6974-55b6-870d-c84330403c90", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1c8ea1b1-6475-566d-9605-6b55b79478e3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.650751Z", "modified": "2026-06-14T11:55:43.650751Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--9b524163-9d48-5d23-92db-27ab61e7c879", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9a56ef1a-763c-5073-9779-d23122cf0781", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.650898Z", "modified": "2026-06-14T11:55:43.650898Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a29f9c04-7229-5404-ba68-1acc19de7fd1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.651021Z", "modified": "2026-06-14T11:55:43.651021Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--d6b8aa8c-cfd9-5f42-a8ac-2573005abb2f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--00f87eca-236e-542c-b520-411df2ffe009", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.65115Z", "modified": "2026-06-14T11:55:43.65115Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--556aeba8-d3dc-5015-b934-460dc239d73c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3f79aea2-2aba-545d-9bac-61a87457c063", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.65132Z", "modified": "2026-06-14T11:55:43.65132Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--81689a9f-afbb-5e46-9e03-27870deb6236", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.651527Z", "modified": "2026-06-14T11:55:43.651527Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--35b6ddf9-2e7d-54f7-bb5d-ea729ef40e8f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.651739Z", "modified": "2026-06-14T11:55:43.651739Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--351c2bb8-092f-5863-b623-f9ca08b16432", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--094680f5-e5c2-5b00-a3f4-230f392f7396", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.651905Z", "modified": "2026-06-14T11:55:43.651905Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7db7a37b-b0af-5cf0-b1c1-5f79fd6f54a4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.652069Z", "modified": "2026-06-14T11:55:43.652069Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--73095fe6-d1c0-5d99-8629-b5e57e098421", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.652231Z", "modified": "2026-06-14T11:55:43.652231Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01dac579-9ead-58e7-857c-6726b389dde4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.652394Z", "modified": "2026-06-14T11:55:43.652394Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--8e773df3-b3cc-54bd-83db-4028fe946d79", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd478e3a-c0aa-5ae0-8adc-8f5361e0f8ac", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.65256Z", "modified": "2026-06-14T11:55:43.65256Z", "relationship_type": "uses", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "attack-pattern--2897b2f1-408a-5653-857f-ba8d519a3780", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--91e1138b-2074-5a92-b8fc-5658dcbd2974", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.652738Z", "modified": "2026-06-14T11:55:43.652738Z", "relationship_type": "communicates-with", "source_ref": "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "target_ref": "infrastructure--dac325a3-34f0-5333-9f2c-ca30f04caa6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6163dac6-2473-5a70-a5f5-d36e30345ab8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.652922Z", "modified": "2026-06-14T11:55:43.652922Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--51ff1e68-d4d9-595b-8f82-8e3931b8b07c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.653217Z", "modified": "2026-06-14T11:55:43.653217Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--d81b46ce-ef63-5c04-a945-180b77ff6da7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6360eedf-3a5d-5865-b722-906122c997ed", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.653415Z", "modified": "2026-06-14T11:55:43.653415Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--0876da5f-998d-56c9-bcbe-39e02e92a674", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c7744006-dc36-52c2-b0b4-44e28145de94", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.653601Z", "modified": "2026-06-14T11:55:43.653601Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5fea860c-9d10-5da1-8b49-eea1ee8d9ed5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.6538Z", "modified": "2026-06-14T11:55:43.6538Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--05e788f9-391f-5202-a2a0-18bd94af33cb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.653995Z", "modified": "2026-06-14T11:55:43.653995Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--ffc8418f-0d81-521e-8a6a-53506f9db000", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--518de248-f071-5a93-89df-a4ce4e85ff24", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.654191Z", "modified": "2026-06-14T11:55:43.654191Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--9ded537c-42e2-5235-a25b-9e9e0ee0af8d", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ba9d94b-2628-55f1-971d-924d94c924d5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.654381Z", "modified": "2026-06-14T11:55:43.654381Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--a4f95946-472a-5f0c-adff-9624066a10f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9839ba46-e2f9-59cb-9343-864bb27cbf14", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.65457Z", "modified": "2026-06-14T11:55:43.65457Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--dbe27491-3e9e-59bf-a1dd-3fef78aa73ba", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eca07a24-e0db-51f6-b603-2424585fb2e6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.654742Z", "modified": "2026-06-14T11:55:43.654742Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--46b8c749-9b05-56fc-aecb-ea078129df64", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.654926Z", "modified": "2026-06-14T11:55:43.654926Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--fd8dd968-9ef8-5d44-9278-54e070789645", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e98aa8f-7156-5495-901f-bc11b5bb6433", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.655101Z", "modified": "2026-06-14T11:55:43.655101Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--e2d2ee17-9433-5131-89da-04f3c8c87b74", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7f3e065c-8793-5231-8054-9201f57c9801", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.655274Z", "modified": "2026-06-14T11:55:43.655274Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1f021657-b351-5a8c-837d-1e45bf2073f3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.655471Z", "modified": "2026-06-14T11:55:43.655471Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a060d78-4e4d-5a42-99f3-c028b46060e4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.655652Z", "modified": "2026-06-14T11:55:43.655652Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--66a9c17d-821c-55aa-8191-aeeaa45ea80e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.655833Z", "modified": "2026-06-14T11:55:43.655833Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--4d78476e-e20d-514e-afd4-b91af65314cc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d3dbebcb-c141-52c7-b867-8c1390450b8a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.656028Z", "modified": "2026-06-14T11:55:43.656028Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--67cee5b2-7970-5505-949d-f0b9a6c1c4bf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e1a8191-52ba-5417-b8aa-ee582993dbb0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.656214Z", "modified": "2026-06-14T11:55:43.656214Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--7b60982f-6974-55b6-870d-c84330403c90", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--665e4b4f-c2dc-5e7e-bee7-9cefcc2f7ee3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.656388Z", "modified": "2026-06-14T11:55:43.656388Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--9b524163-9d48-5d23-92db-27ab61e7c879", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9a0a1b43-a214-575a-8513-8aebe415c70a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.656566Z", "modified": "2026-06-14T11:55:43.656566Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fbec8241-661a-5d15-a6f6-6417cd34a002", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.656733Z", "modified": "2026-06-14T11:55:43.656733Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--d6b8aa8c-cfd9-5f42-a8ac-2573005abb2f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--caa5f050-c864-5122-89d5-0247d9d35857", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.656902Z", "modified": "2026-06-14T11:55:43.656902Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--556aeba8-d3dc-5015-b934-460dc239d73c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--887028ac-1aa6-5dbe-8f2a-e75d6ef672ce", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.657407Z", "modified": "2026-06-14T11:55:43.657407Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--70891d75-e5b9-51c0-8a52-909d90f75492", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.657589Z", "modified": "2026-06-14T11:55:43.657589Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--41dac04e-c03f-5545-8df3-7d2ac6247bb1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.657767Z", "modified": "2026-06-14T11:55:43.657767Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--351c2bb8-092f-5863-b623-f9ca08b16432", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3964a529-561e-502e-b243-b61adf0a05e4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.657897Z", "modified": "2026-06-14T11:55:43.657897Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08cb6574-dddc-52cf-ada5-4e32e0b4999f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.658083Z", "modified": "2026-06-14T11:55:43.658083Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3500dda8-3440-5617-8228-e0acdd9b3a39", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.658264Z", "modified": "2026-06-14T11:55:43.658264Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8cf5707e-8028-5357-829b-ed90b4801c48", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.658435Z", "modified": "2026-06-14T11:55:43.658435Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--8e773df3-b3cc-54bd-83db-4028fe946d79", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--727e1593-bbd7-5ae8-baab-3fd4bb5914db", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.658601Z", "modified": "2026-06-14T11:55:43.658601Z", "relationship_type": "uses", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "attack-pattern--2897b2f1-408a-5653-857f-ba8d519a3780", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cf454c81-7740-5ee2-a0d8-9c9d9bf9aa4c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.65877Z", "modified": "2026-06-14T11:55:43.65877Z", "relationship_type": "communicates-with", "source_ref": "malware--b16b0f31-243d-52a8-892c-0d5204715671", "target_ref": "infrastructure--dac325a3-34f0-5333-9f2c-ca30f04caa6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e667923c-6b05-57b6-8471-20d97c8815df", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.658935Z", "modified": "2026-06-14T11:55:43.658935Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8de2c26f-26ce-59a0-9804-eb310a50ffef", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.65921Z", "modified": "2026-06-14T11:55:43.65921Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--d81b46ce-ef63-5c04-a945-180b77ff6da7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2673640-12f6-5acc-9af4-00cf8f338093", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.659373Z", "modified": "2026-06-14T11:55:43.659373Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--0876da5f-998d-56c9-bcbe-39e02e92a674", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fdc8179d-ab8b-54dd-9a7b-16699c49af62", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.659534Z", "modified": "2026-06-14T11:55:43.659534Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec5291ff-c43f-5eaa-aa28-b3cb26246dc8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.659683Z", "modified": "2026-06-14T11:55:43.659683Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--21e6029d-3456-5e6d-ac10-2c051cc435e5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.659834Z", "modified": "2026-06-14T11:55:43.659834Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--ffc8418f-0d81-521e-8a6a-53506f9db000", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4130d90b-f4d4-5f17-8865-a8bd11f1f0b5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.660019Z", "modified": "2026-06-14T11:55:43.660019Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--9ded537c-42e2-5235-a25b-9e9e0ee0af8d", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53919cdf-b52b-50b9-b8bb-1b9f4060b2fa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.6602Z", "modified": "2026-06-14T11:55:43.6602Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--a4f95946-472a-5f0c-adff-9624066a10f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--81498388-d01f-5559-8825-032c6fa8cb25", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.6604Z", "modified": "2026-06-14T11:55:43.6604Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--dbe27491-3e9e-59bf-a1dd-3fef78aa73ba", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1077b1d8-2080-515b-9e29-05b44fded641", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.66058Z", "modified": "2026-06-14T11:55:43.66058Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e8c26c1b-892e-5327-8bae-67e4837be486", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.66072Z", "modified": "2026-06-14T11:55:43.66072Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--fd8dd968-9ef8-5d44-9278-54e070789645", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e056030-aa60-5c55-99be-ce784808142e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.6609Z", "modified": "2026-06-14T11:55:43.6609Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--e2d2ee17-9433-5131-89da-04f3c8c87b74", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8a75f414-ff79-5448-bbf8-f09f3436a488", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.661093Z", "modified": "2026-06-14T11:55:43.661093Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01a1c82f-d45d-507a-8152-56f016799c4e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.661277Z", "modified": "2026-06-14T11:55:43.661277Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96b3ae97-c982-54b4-8696-25a8301291af", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.661601Z", "modified": "2026-06-14T11:55:43.661601Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ab721e7-b98e-58ac-b1e1-18622949cdc8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.661777Z", "modified": "2026-06-14T11:55:43.661777Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--4d78476e-e20d-514e-afd4-b91af65314cc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d1701cd9-15a2-5e8f-ab0a-d5c18890ea7f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.661939Z", "modified": "2026-06-14T11:55:43.661939Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--67cee5b2-7970-5505-949d-f0b9a6c1c4bf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0fbe26f5-141b-57aa-b0d0-63c0ec4fa1d0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.66212Z", "modified": "2026-06-14T11:55:43.66212Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--7b60982f-6974-55b6-870d-c84330403c90", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cdd16d70-3906-511a-945e-02ceafb83cd6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.662316Z", "modified": "2026-06-14T11:55:43.662316Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--9b524163-9d48-5d23-92db-27ab61e7c879", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--460a1d8b-2d95-5a94-8f96-04a362dd6e9f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.662508Z", "modified": "2026-06-14T11:55:43.662508Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--afaf418d-bc1b-5237-9c9d-eb9e6ce5b683", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.662934Z", "modified": "2026-06-14T11:55:43.662934Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--d6b8aa8c-cfd9-5f42-a8ac-2573005abb2f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9c2602f6-09e5-540a-84e9-e2012f41a509", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.663186Z", "modified": "2026-06-14T11:55:43.663186Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--556aeba8-d3dc-5015-b934-460dc239d73c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--27ee45a5-9b12-5b47-84cf-85c3fe458df0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.66338Z", "modified": "2026-06-14T11:55:43.66338Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d5dbdea8-ef66-535e-82c2-7195c0097a66", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.66357Z", "modified": "2026-06-14T11:55:43.66357Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4afbadd1-c563-5b0f-b914-a30c425494d7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.663773Z", "modified": "2026-06-14T11:55:43.663773Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--351c2bb8-092f-5863-b623-f9ca08b16432", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--560ca534-d818-5332-a6b2-82443b3352f0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.663953Z", "modified": "2026-06-14T11:55:43.663953Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f2e28e05-846d-5752-b2e1-7ac2061ab2fb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.664072Z", "modified": "2026-06-14T11:55:43.664072Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9cbc5195-1b83-5223-b016-0d912148ce5b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.664203Z", "modified": "2026-06-14T11:55:43.664203Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b81bb21d-24c4-580e-b338-612531bebf74", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.664338Z", "modified": "2026-06-14T11:55:43.664338Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--8e773df3-b3cc-54bd-83db-4028fe946d79", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9188d306-4dfd-5c09-8ec6-f81a8901adc1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.664489Z", "modified": "2026-06-14T11:55:43.664489Z", "relationship_type": "uses", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "attack-pattern--2897b2f1-408a-5653-857f-ba8d519a3780", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e7ace2c8-d1d1-5535-9084-eb0e9f645da9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.664601Z", "modified": "2026-06-14T11:55:43.664601Z", "relationship_type": "communicates-with", "source_ref": "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "target_ref": "infrastructure--dac325a3-34f0-5333-9f2c-ca30f04caa6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ae7f39ef-2405-506c-b67a-c94882d4f701", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.664731Z", "modified": "2026-06-14T11:55:43.664731Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4acb9a87-bb33-5943-affd-148b4d6fe435", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.664868Z", "modified": "2026-06-14T11:55:43.664868Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--d81b46ce-ef63-5c04-a945-180b77ff6da7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f946b66d-1eb8-53a6-a1f8-a4563dc8b14a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.665027Z", "modified": "2026-06-14T11:55:43.665027Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--0876da5f-998d-56c9-bcbe-39e02e92a674", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a9895ba-45bb-59ae-bb69-0ee64b6d1475", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.665236Z", "modified": "2026-06-14T11:55:43.665236Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--22ee5f22-1ab1-5e1c-8fb1-e7bc574f0f7e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.665446Z", "modified": "2026-06-14T11:55:43.665446Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e7664c74-270c-5dcc-9182-41987445b628", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.665624Z", "modified": "2026-06-14T11:55:43.665624Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--ffc8418f-0d81-521e-8a6a-53506f9db000", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e1d82dc5-5884-501f-83a1-5705b8885b71", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.665778Z", "modified": "2026-06-14T11:55:43.665778Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--9ded537c-42e2-5235-a25b-9e9e0ee0af8d", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3a42c165-06a3-59cb-a83f-0832ada77e60", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.665896Z", "modified": "2026-06-14T11:55:43.665896Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--a4f95946-472a-5f0c-adff-9624066a10f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--091cde1e-9f48-5e47-aed0-a35b18f09349", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.666052Z", "modified": "2026-06-14T11:55:43.666052Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--dbe27491-3e9e-59bf-a1dd-3fef78aa73ba", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d7360d44-9623-5a1d-9945-e043a6a09a85", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.666208Z", "modified": "2026-06-14T11:55:43.666208Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b691555a-8e3d-5b32-9941-23ed5e4e51e8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.666352Z", "modified": "2026-06-14T11:55:43.666352Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--fd8dd968-9ef8-5d44-9278-54e070789645", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--07f26326-1cc0-5b12-9b14-bbd8ea7c1988", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.666536Z", "modified": "2026-06-14T11:55:43.666536Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--e2d2ee17-9433-5131-89da-04f3c8c87b74", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2962798-308e-5faa-bb8f-bee5c5863287", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.666727Z", "modified": "2026-06-14T11:55:43.666727Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bda271d2-0f01-5ef1-aa74-fc066a0bf12a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.666905Z", "modified": "2026-06-14T11:55:43.666905Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64f8812d-69fc-51a3-a281-35450f0d2b85", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.66707Z", "modified": "2026-06-14T11:55:43.66707Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c1eac889-0d7c-57de-b7f4-bbaf9afeb937", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.667225Z", "modified": "2026-06-14T11:55:43.667225Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--4d78476e-e20d-514e-afd4-b91af65314cc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a13ca69-9e60-5453-b123-deea52084c8b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.667403Z", "modified": "2026-06-14T11:55:43.667403Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--67cee5b2-7970-5505-949d-f0b9a6c1c4bf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa0d7f82-749a-59c6-a3bc-6ede9dad688d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.66756Z", "modified": "2026-06-14T11:55:43.66756Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--7b60982f-6974-55b6-870d-c84330403c90", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3621e8e5-4735-5349-8d22-753bdb9c188f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.667743Z", "modified": "2026-06-14T11:55:43.667743Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--9b524163-9d48-5d23-92db-27ab61e7c879", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a8ca5e0e-af9c-55d2-89f2-68a904d533e3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.667873Z", "modified": "2026-06-14T11:55:43.667873Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a617004d-3fca-5d85-8a59-d9cb538586bb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.667986Z", "modified": "2026-06-14T11:55:43.667986Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--d6b8aa8c-cfd9-5f42-a8ac-2573005abb2f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cafd9eef-6170-5d72-8706-a1769da9fa49", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.668104Z", "modified": "2026-06-14T11:55:43.668104Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--556aeba8-d3dc-5015-b934-460dc239d73c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b01c282-14dd-5f91-ab40-8096e10b2121", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.668207Z", "modified": "2026-06-14T11:55:43.668207Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4cb5f8e3-d206-5dc7-907a-b76c5acef57b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.668329Z", "modified": "2026-06-14T11:55:43.668329Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fd85c625-b67c-5fc8-a847-6a22ac312c8d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.66846Z", "modified": "2026-06-14T11:55:43.66846Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--351c2bb8-092f-5863-b623-f9ca08b16432", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca8b180e-7bcd-55e5-a786-40b7822a242c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.668572Z", "modified": "2026-06-14T11:55:43.668572Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7a440a1b-4cca-54e2-96c7-24f8e1c6fe7f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.668689Z", "modified": "2026-06-14T11:55:43.668689Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b701f0b-ddb5-5647-9940-4fb40a412574", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.668808Z", "modified": "2026-06-14T11:55:43.668808Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d4bb00a-2cc4-5ba1-a151-d40868f774a6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.668936Z", "modified": "2026-06-14T11:55:43.668936Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--8e773df3-b3cc-54bd-83db-4028fe946d79", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8170451e-892e-564c-b964-500a6e3ed50c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.669048Z", "modified": "2026-06-14T11:55:43.669048Z", "relationship_type": "uses", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "attack-pattern--2897b2f1-408a-5653-857f-ba8d519a3780", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a11e0c57-64c3-5426-8705-5900e49a0897", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.66916Z", "modified": "2026-06-14T11:55:43.66916Z", "relationship_type": "communicates-with", "source_ref": "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "target_ref": "infrastructure--dac325a3-34f0-5333-9f2c-ca30f04caa6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48b88419-7edc-5e91-8720-667b3318cd88", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.669284Z", "modified": "2026-06-14T11:55:43.669284Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c4a911bf-9245-5eb8-9719-0ca3a8abab63", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.6695Z", "modified": "2026-06-14T11:55:43.6695Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--d81b46ce-ef63-5c04-a945-180b77ff6da7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--88c4207c-ce42-5d55-8b0f-82ef847b365b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.669702Z", "modified": "2026-06-14T11:55:43.669702Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--0876da5f-998d-56c9-bcbe-39e02e92a674", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2ddba0a6-b75f-5cee-974c-9af13353a4f7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.669923Z", "modified": "2026-06-14T11:55:43.669923Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--07f138af-5a9d-5098-8592-29026a0ad02e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.670121Z", "modified": "2026-06-14T11:55:43.670121Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a9503a7-f626-56b1-9143-ac303bd42b24", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.670316Z", "modified": "2026-06-14T11:55:43.670316Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--ffc8418f-0d81-521e-8a6a-53506f9db000", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f7d83ad7-a9ee-57d1-b75c-c9536017efdb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.670515Z", "modified": "2026-06-14T11:55:43.670515Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--9ded537c-42e2-5235-a25b-9e9e0ee0af8d", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31602f39-eec9-5925-98f1-fb8918227cfd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.670712Z", "modified": "2026-06-14T11:55:43.670712Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--a4f95946-472a-5f0c-adff-9624066a10f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a23b5f70-0bcc-5d3a-9d27-114c3486abf1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.671017Z", "modified": "2026-06-14T11:55:43.671017Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--dbe27491-3e9e-59bf-a1dd-3fef78aa73ba", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7da00410-55fe-5b79-bd07-35b8740f9ced", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.671217Z", "modified": "2026-06-14T11:55:43.671217Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5a830b3-efff-5679-a4eb-42166518f7f1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.671453Z", "modified": "2026-06-14T11:55:43.671453Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--fd8dd968-9ef8-5d44-9278-54e070789645", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--625573f9-98d4-5c06-9ff2-ec8c75edaf2e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.671638Z", "modified": "2026-06-14T11:55:43.671638Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--e2d2ee17-9433-5131-89da-04f3c8c87b74", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2d9dab1f-3537-5984-a093-276ac8e35d00", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.671921Z", "modified": "2026-06-14T11:55:43.671921Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e1028aba-1bde-5694-937a-abfbdb963f48", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.672116Z", "modified": "2026-06-14T11:55:43.672116Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b075cfc6-9899-52ba-afcd-eee055085bf1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.672285Z", "modified": "2026-06-14T11:55:43.672285Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--756ada13-9c0a-506f-bb54-ae1d7caea490", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.672468Z", "modified": "2026-06-14T11:55:43.672468Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--4d78476e-e20d-514e-afd4-b91af65314cc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8aaec77a-6442-5d3e-8f15-e16b1fd66a1c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.672658Z", "modified": "2026-06-14T11:55:43.672658Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--67cee5b2-7970-5505-949d-f0b9a6c1c4bf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d799f5d7-92d6-5fc1-8386-ec58330af7b5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.672842Z", "modified": "2026-06-14T11:55:43.672842Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--7b60982f-6974-55b6-870d-c84330403c90", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e909aea-90eb-5c29-8556-e791a017cd1a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.67303Z", "modified": "2026-06-14T11:55:43.67303Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--9b524163-9d48-5d23-92db-27ab61e7c879", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4915fea2-7530-55c2-85ca-f4694504d036", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.673228Z", "modified": "2026-06-14T11:55:43.673228Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8f1fd9cd-4f47-5fb5-87f3-d7dba4218e5c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.673452Z", "modified": "2026-06-14T11:55:43.673452Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--d6b8aa8c-cfd9-5f42-a8ac-2573005abb2f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47b216fb-33ee-5b9f-af38-760e867687a9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.673656Z", "modified": "2026-06-14T11:55:43.673656Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--556aeba8-d3dc-5015-b934-460dc239d73c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6b2abdc-7c14-5da3-a244-b99861fb8aea", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.673838Z", "modified": "2026-06-14T11:55:43.673838Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8bc91ba-3c17-5782-884e-8fa62c1042c8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.67402Z", "modified": "2026-06-14T11:55:43.67402Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6fd150a4-2f7f-521a-8879-367867ad8b10", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.674215Z", "modified": "2026-06-14T11:55:43.674215Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--351c2bb8-092f-5863-b623-f9ca08b16432", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5eeeaf6-4abf-5890-8172-37d55ab14fbb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.67441Z", "modified": "2026-06-14T11:55:43.67441Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc2e54e6-0877-572c-ac39-6ebc018db53a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.674588Z", "modified": "2026-06-14T11:55:43.674588Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4e7f4bac-daeb-5c98-867c-d02b7c18c0bb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.674767Z", "modified": "2026-06-14T11:55:43.674767Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5eeaa2d-df5f-5457-8e0b-5ac11c7cb5bf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.674956Z", "modified": "2026-06-14T11:55:43.674956Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--8e773df3-b3cc-54bd-83db-4028fe946d79", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ab333f0-8b24-5d9c-b3c5-572189a59256", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.67514Z", "modified": "2026-06-14T11:55:43.67514Z", "relationship_type": "uses", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "attack-pattern--2897b2f1-408a-5653-857f-ba8d519a3780", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c52e3e5-8f91-5b3f-90cb-f8ef5aa8e133", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.675322Z", "modified": "2026-06-14T11:55:43.675322Z", "relationship_type": "communicates-with", "source_ref": "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "target_ref": "infrastructure--dac325a3-34f0-5333-9f2c-ca30f04caa6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "report", "spec_version": "2.1", "id": "report--ffb8d174-a8c9-5fc5-b94f-9462fdff65b3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:55:43.676166Z", "modified": "2026-06-14T11:55:43.676166Z", "name": "BellaMain \u2014 Turkish Phishing-as-a-Service Panel with USOM Self-Monitor, Four-Bot Telegram C2, On-Demand TRUNCATE Anti-Forensics, and Wadanz Code-Author Signature", "description": "Full PHP source code recovered from open-directory at 79.137.192.3 (Aeza Group, Moscow, AS216246).; BellaMain.zip (panel) was novel to VirusTotal at time of analysis (first public disclosure).; Hardcoded canary Telegram bot token 6797512084:AAGbJVoC* is REVOKED (Telegram returned 401 Unauthorized on getMe prior to publication). Token value retained as historical IOC for hunting on stored copies of older kit RARs.; All operator domains are 0/92 detection on VirusTotal as of 2026-05-07 \u2014 defenders should not rely on AV verdicts for this campaign.", "report_types": [ "threat-report" ], "published": "2026-05-16T00:00:00Z", "object_refs": [ "ipv4-addr--bef565ae-5d19-54fe-9006-25ed9da29673", "indicator--7687fd58-e250-5606-b2b3-2f3f8e5c319a", "url--a9d7476c-3d80-5b2c-98b6-71505ae1afc2", "indicator--8482362e-4a99-5a1f-afff-bbef1d84ad86", "url--252fd038-7ac3-5392-90d5-39ed7a4e2f90", "indicator--cdbc6d22-5f04-5e08-816c-7d866d05d23e", "url--95b9d1ff-60fc-536f-af43-b4b60093eefa", "indicator--ac2e78ac-a9b0-5ee4-af5c-a50261a7c5fd", "url--1e5c34e3-21a7-55bb-9d47-58b682e2f7ee", "indicator--5ab6d935-38b3-5d7a-9935-a1511db09cce", "url--7a87a189-ed02-592d-994c-5ae80f8cd6d8", "indicator--e5a1586a-793d-5af6-be39-26bd588397e2", "url--fb7ac48d-aad8-51d5-928d-abdfce08ce0f", "indicator--2d0dde9d-b206-53b3-970f-cabb56a56798", "url--a563b73d-9c16-5fa5-a08d-da8298d59201", "indicator--85e3e5ed-23b4-5a03-8549-49ed50b2b3ad", "domain-name--f282b868-cf66-5733-a3a4-98fb8aa84ec3", "indicator--0893edb6-299b-5a34-b8f0-968d93022caf", "domain-name--7dbdc38c-55bf-57c4-a914-edbed6952454", "indicator--ad7126bf-a3d8-52cc-bef2-ebd1f25912ae", "file--a771c71e-a691-586b-be08-94b3a1308c67", "indicator--6ea87d8f-b64a-5056-bedb-8a4cb23b4eaa", "file--09430cff-d568-59fa-89a4-bc3587391aea", "indicator--a91be888-c519-535f-9ffc-5fce3143a387", "file--a03ca6aa-180a-579a-ab75-71ec4c039314", "indicator--0bdd4f90-17e2-5af9-a648-4ae6bd76f23a", "file--172f5e07-a213-56d4-8589-2553d29dec5a", "indicator--f93c9e10-f908-557b-a878-a64dc1b8f2ed", "file--d6cc8480-af87-5520-92f7-1664f4b684d0", "indicator--cb1ced5e-8ce2-5a01-bcd8-c67bfa2749db", "file--bd9e4afa-4db3-54c9-96ff-88896edbeaa9", "indicator--6a921d96-534d-59fd-a6a7-1423dfe3c1f4", "file--1d95e447-3ee0-5b20-89f3-267ccf44ef32", "indicator--4652c8d4-2fc6-505a-8a87-f4ebc56946fc", "file--e7000fa0-da4b-5a63-b341-81ca40b9bc10", "indicator--835e7fcb-cb7b-5047-8f2f-d850274c7d89", "indicator--bd978fd0-3b2c-5b6e-8869-8924c118e535", "indicator--e2c286a6-ce86-59e3-995c-a641f07be090", "indicator--61ea88ab-de01-5937-b2a8-98c1e7a5065f", "indicator--1d2ea644-0f79-5602-b8d4-aaa50d2e426c", "indicator--445fca4a-c9b7-5d08-b36b-4eeb85e5d0c3", "indicator--5cc83de1-db8a-5de5-b5b5-469b64245206", "indicator--1661a35a-7708-5274-ada2-af503f2db671", "indicator--92110722-6ba7-5523-afaf-7f3dc75e4646", "indicator--1f44f0c9-646d-5512-8ff5-19e961ad71db", "indicator--84bff7ba-76be-569b-b54d-07866eae2763", "indicator--38abb5bc-fdee-53f7-8fef-a7828897c02d", "indicator--3e1b762c-4b47-5405-96f0-00b4ee79b584", "indicator--14947fc6-ba8e-5f99-bc46-05efd011413c", "malware--ed8ffe3c-19d2-584e-b8e6-b61bc951fb4d", "malware--533b2678-3aa8-5cbb-ae67-0123f0ce272a", "malware--bfe859c2-fe74-5e6c-84e3-1ca2742fe9fe", "malware--a5bbff42-cb93-5007-97fd-4de42ce77ae3", "malware--4cb9a921-36d2-5ff1-bc9c-219a0d3da5e9", "malware--b16b0f31-243d-52a8-892c-0d5204715671", "malware--c71a6794-c72f-5e05-a4ab-c08d44b803a8", "malware--f34677ff-e5fe-55ba-9ecb-c0075eec3f85", "malware--02c0674a-16cb-5bc8-844c-dfccfc3f0d45", "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "attack-pattern--d81b46ce-ef63-5c04-a945-180b77ff6da7", "attack-pattern--0876da5f-998d-56c9-bcbe-39e02e92a674", "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "attack-pattern--ffc8418f-0d81-521e-8a6a-53506f9db000", "attack-pattern--9ded537c-42e2-5235-a25b-9e9e0ee0af8d", "attack-pattern--a4f95946-472a-5f0c-adff-9624066a10f1", "attack-pattern--dbe27491-3e9e-59bf-a1dd-3fef78aa73ba", "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "attack-pattern--fd8dd968-9ef8-5d44-9278-54e070789645", "attack-pattern--e2d2ee17-9433-5131-89da-04f3c8c87b74", "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb", "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac", "attack-pattern--4d78476e-e20d-514e-afd4-b91af65314cc", "attack-pattern--67cee5b2-7970-5505-949d-f0b9a6c1c4bf", "attack-pattern--7b60982f-6974-55b6-870d-c84330403c90", "attack-pattern--9b524163-9d48-5d23-92db-27ab61e7c879", "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "attack-pattern--d6b8aa8c-cfd9-5f42-a8ac-2573005abb2f", "attack-pattern--556aeba8-d3dc-5015-b934-460dc239d73c", "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "attack-pattern--351c2bb8-092f-5863-b623-f9ca08b16432", "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713", "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374", "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b", "attack-pattern--8e773df3-b3cc-54bd-83db-4028fe946d79", "attack-pattern--2897b2f1-408a-5653-857f-ba8d519a3780", "infrastructure--dac325a3-34f0-5333-9f2c-ca30f04caa6a", "relationship--f6ab5005-45e3-5869-90e6-a1a819e02a43", "relationship--e8ae171e-671d-5316-8db8-6b4d0d96cedc", "relationship--23bc578d-dfcb-5e85-84e8-e9ad3846a910", "relationship--53f5b737-5e06-5973-b83c-f20db713bcbc", "relationship--300d0b8d-ca34-5752-919b-ee50a355acb1", "relationship--83385fa7-acd6-5ab5-aa13-39c647e561df", "relationship--f2fafb06-c6b6-5ba6-9024-8a267daeadfc", "relationship--b482a29a-9b34-5de5-9dc8-f1fa55c9bde9", "relationship--7e8a1b71-623f-5560-ae20-3af901d20f1f", "relationship--7b45ba39-7abc-5c12-8cf3-c77b55e96e32", "relationship--98f8fc16-7e64-5f60-944f-e8f9e2b83f7b", "relationship--1440d0ba-a5db-5c63-b340-1a6063a67584", "relationship--813c0fdd-14e0-52cb-b247-87d754522902", "relationship--97d0b65c-e548-5d98-a357-6fac56106085", "relationship--b91aa251-da40-5e94-946a-4ea2fe5d9dd8", "relationship--be1c34e8-4558-5887-871a-d9eebfeecaf7", "relationship--6bf5b480-a3a0-5a50-a424-aeee0bea4302", "relationship--bb13a32d-2765-5e73-97d8-fd1b24506a0e", "relationship--e8033d60-21cc-5859-81ca-6811329a3772", "relationship--238e69e0-e581-5b1e-980c-4259d41e2959", "relationship--4a9f24df-e041-55fd-ac43-fd06a9f3a256", "relationship--9b2ffb18-005b-5c8c-9a77-a242fcf91b22", "relationship--39ec1721-185b-57cb-b48a-2516f93821b5", "relationship--48e630d3-7522-5806-8c50-27fcef15c8d2", "relationship--f8ae9b58-c71f-5cb6-9f23-251857c02c4e", "relationship--e9210d6c-f0bb-53ff-938b-5a09d666468e", "relationship--396666c1-bf0c-5a0b-986b-22ab3aef3730", "relationship--a280b7c7-05e5-5c17-8f99-af8f059e73bd", "relationship--00cfa385-e21f-5d78-b030-6d201713d9bf", "relationship--66f9f995-888b-5b11-ab14-55adcb53990f", "relationship--7c23a323-f746-5013-924c-afea62281c5d", "relationship--f82c10a5-a0f6-5b06-8d4b-c96d5f7849db", "relationship--fde00f73-d632-528b-aea5-9d6cbd5c0220", "relationship--666009b0-19f1-5d42-a1e2-e510fb664dcb", "relationship--64d1b505-62cc-5c1e-a36a-8233ce2430b1", "relationship--fa0bf56f-0c58-5789-80d6-ba793fbac266", "relationship--c73cca17-733d-55ba-9aa9-279ea43f2c1b", "relationship--246f9ffb-e446-5c28-a8ff-e2cd61268570", "relationship--3a6d008d-6fc3-547f-bc09-ce93088f175d", "relationship--31a7a15f-ee72-5ff4-82a6-9c20e236250d", "relationship--34d03ff6-4e80-5deb-8321-c05492d55b71", "relationship--071ce205-a32f-5e0e-bfde-f35c7f75a456", "relationship--83bc22c2-bf1f-5c80-b91f-3252793a4b35", "relationship--65a0c8ed-5906-560e-b2a7-d428976f3687", "relationship--45d6a6c1-0e07-5e63-b2f3-b52020722907", "relationship--f9df15c5-8003-5527-a4f3-846c693327d8", "relationship--dbbd4729-cf15-5942-955d-ce1d11f2352b", "relationship--d60bd9f2-1321-50e2-8c8c-e680eb8ddd3d", "relationship--ceba112a-6a3b-50ff-994c-7b996c2de79b", "relationship--1b0c5a3d-6d57-579f-b95d-c183f0466c03", "relationship--f5f28825-bee6-550c-b2c3-7cb65b99d905", "relationship--aa915999-2a77-5967-afd2-fafc712325ad", "relationship--aa7fa1dc-35ba-5e85-93a4-c746c295b8a8", "relationship--884e5f95-0ba5-5e9a-9ec3-c3cb69c59440", "relationship--34860b2d-6314-5051-b05c-63e509052e8b", "relationship--f867d978-bd27-5e7a-9f62-b172a69b2e5c", "relationship--594d3cdd-97b3-5050-824b-27c0aba74323", "relationship--f9b1a9b4-7e16-5cb8-80bb-2097e8e80831", "relationship--e19699cd-e152-5a91-9293-72e93c859e73", "relationship--737eb46d-d2a2-5e13-85e5-85b414ef2a98", "relationship--d7650953-88e2-53dc-9f7e-60a48b65f994", "relationship--1eefb89f-fcdb-515f-b158-de0048e08b9c", "relationship--23b726ca-4e75-5cf6-a6cc-2962d04656cd", "relationship--34aef240-a130-5a1d-9755-417f2904d494", "relationship--d4df2e08-b799-5834-90c7-0d2264bac5f6", "relationship--3e34fd8f-19ad-5aa0-94df-faabcd460439", "relationship--395a75f4-9e00-5caa-9cb2-bb5a3b649827", "relationship--d2502c19-6a64-5ff4-aa50-50c4a3396c11", "relationship--a89972a0-0c9f-5343-98a2-fc673752216d", "relationship--08ef9ef8-91c2-5082-9ff0-260ecf8551d5", "relationship--eb7544dd-4baa-5176-ad0d-609c3537a5e6", "relationship--b345ae44-2cdd-51ac-bd8f-5586f5aa3ab5", "relationship--7f26aaa7-a8ae-5457-9ff5-40fab389d68d", "relationship--879941e0-4ea3-59c7-afe6-b6aff776a31b", "relationship--cad8cc25-d383-57bf-bcb4-427dd4634fa6", "relationship--fae65d52-1d67-551f-8a43-3889b469eeb7", "relationship--fa631a21-9b9f-54dc-b161-2765d5895f40", "relationship--b888a1af-9fe5-52ab-a412-3a99b99f0ea0", "relationship--c5e8d6c9-2e02-5cb7-8fd3-2d3f969c45cf", "relationship--4b07b277-f6b8-5326-b2c8-086eaa08a295", "relationship--f11e2d48-99c2-581d-b316-2f38dba98d52", "relationship--a0f95f28-b733-59d2-b761-2fdb82a5a7bb", "relationship--c0bbe169-1b44-53d3-87fa-fab170c094e0", "relationship--d6283efb-049c-51b6-aedf-58526a415314", "relationship--48c93c79-4353-55cb-bed7-00f748241d45", "relationship--3b434d3e-1b21-5c3d-b07f-61951efe43f4", "relationship--de572844-0b3e-5574-9db5-451a8ae15403", "relationship--f046aea8-cab3-5a64-8e51-332b1dc9c274", "relationship--382c242d-e809-56f6-9225-a79d8bf56383", "relationship--8cfc204f-0511-59e0-b9f7-df3ab2e1762d", "relationship--f8b74163-2a40-5139-8ec1-a3e20379fdae", "relationship--40d5e142-b1e8-5bba-a7a8-23fad00b06b9", "relationship--8097592d-b4a0-55a2-988f-495fe3e2882b", "relationship--f847b750-3e6a-5c1f-a56c-4dbab4b99e09", "relationship--1d01bd76-6d34-5179-82f7-35e419f18881", "relationship--c79b04e5-ca19-5579-b756-6cb0ccc688f4", "relationship--56f0223b-c018-5db0-9024-c5d129d3a24c", "relationship--a5b3eef3-4da3-5854-9035-89041f8f0c86", "relationship--2f2d3796-5eb7-501a-9a99-ebedaf2f0cf4", "relationship--9d48cf39-99cb-5026-89d0-7a00d1d99c13", "relationship--6e3c760f-fdd1-5af8-a992-95423068b4b2", "relationship--9f9d9f31-694e-5230-8235-d082b598149c", "relationship--7b1117ef-9303-56bf-a872-c854fdeae338", "relationship--6452cacd-4d91-5124-bc62-3bc7f787521e", "relationship--01fbdeb0-4643-5023-b1e4-b47f6a2d4153", "relationship--d228c0bf-9f32-54c4-9a2f-36f763e07917", "relationship--d6b78bd9-f2dc-5c4d-aa31-40c2ef5e4224", "relationship--a85ddd75-acd4-5e5c-b703-8b232eee9aa3", "relationship--2412fd26-6fb2-53f4-a883-82cb37a50439", "relationship--95cd8d29-2956-57cd-abc4-82f0911582b6", "relationship--6a3c04f7-bc34-514b-a1cf-6ca4e50ba9fe", "relationship--a6b57847-107d-5f07-8804-29e240327dc0", "relationship--c6476215-8531-5bd0-be18-198f7251e321", "relationship--348ba89a-1cca-5efb-b480-0e6d963eef80", "relationship--52bf2151-af7f-51ee-87dc-3d43f239bcf5", "relationship--2f7e6482-79f4-5ab0-89c7-bc20fbe913b2", "relationship--96ef48a4-82bd-5391-b1e8-78ec9834263e", "relationship--5d855788-8686-5a38-badf-a98f396ca64e", "relationship--2608778f-2351-5db8-858c-fc36fa7f530c", "relationship--372eed08-816c-5724-8c3f-460c0461828c", "relationship--69562eb5-d2b8-5c93-9261-439bd767dbc6", "relationship--d9dd807a-315d-599d-b152-4730cc62faf4", "relationship--c79efbda-284b-537d-a443-ea4ae03faf22", "relationship--c0dfda7d-791c-5b1f-9de9-f7a5b43cf1b2", "relationship--598c1d24-d27e-56a7-96fb-5b9bc1d02185", "relationship--22868fda-cf0e-55ec-a5eb-0908b28ce015", "relationship--8b970f5d-f705-536c-954e-4da874f3dabd", "relationship--47955a7b-b402-5351-91af-8dfb86df6e8b", "relationship--08da5b33-fca9-5068-9344-2422d7a738c2", "relationship--08a18f33-6308-5a26-bf9e-226dd643f5eb", "relationship--b2ee5f4f-d90d-5c24-a34a-937acdb9262a", "relationship--f5256d77-062a-5145-bc1d-f470f0df4470", "relationship--275f98c3-6e66-525a-aa21-86a237af9538", "relationship--dc5470ba-96ce-524a-9b7b-2b1211178e6d", "relationship--a63b0589-cefc-51e3-80ff-cb29d1a0ab07", "relationship--2bd00dfb-3232-5d8e-a63d-a30aab908d11", "relationship--0f0ceeb4-a760-5d90-9b33-320b5e1ee946", "relationship--bef864b8-3863-554b-9005-8531502baa3f", "relationship--dce3148c-a52e-5ac6-bac5-87fe3965f98f", "relationship--216dd7e6-fcd9-5f0d-8cfb-36949573cece", "relationship--8d096d27-a405-5c83-9221-fb0a1fee27b4", "relationship--fe631bf8-83e1-55b3-8fe5-d21a0e86a0e4", "relationship--49fb9e43-7636-5245-93de-e030f0293ced", "relationship--26a5f4f9-9005-5f0f-9898-734c4e1fdc9b", "relationship--6d71c35e-a8d6-58e5-9c92-04010ecaf4f1", "relationship--776bcad4-62cf-5963-8f1b-467a782d616b", "relationship--f93047c5-0d75-542f-a628-bae651cecfd0", "relationship--2a6e7909-88cf-5deb-8d37-cb6ee1a97dec", "relationship--92323b1e-bb30-502e-bbdf-58d68bb91d82", "relationship--adda8b32-2c78-5870-aaf2-eb763c0ce1b0", "relationship--5c2ee165-6bef-54f8-8a3a-e8378089f10e", "relationship--83006afa-2aed-51e8-9e4e-6327f41d7611", "relationship--15b08f55-f800-550d-8ba2-615564610399", "relationship--634b1999-030e-5118-bb55-38089e20e438", "relationship--ac2f7288-8d66-586d-a980-b80bc1e23976", "relationship--22ee333f-1e25-53df-bafc-14d9cc057a57", "relationship--98389ce9-9c67-5fac-9cc9-980bbf3150a2", "relationship--9cce2e1f-5654-5a53-81f5-10436b2fa42e", "relationship--8e9e926c-d3f8-5e52-817f-79a9b7597d32", "relationship--36f76b54-3d48-5b1d-8c81-7a2b26d9e862", "relationship--55413027-ed04-5838-a376-8ea3bcf9c097", "relationship--46c89107-123c-587f-a74e-bf9ad011aa35", "relationship--4eb83902-2b82-5f14-9c74-5724b6074b86", "relationship--f3b45070-b12a-5ebf-b707-a83f9a72dc82", "relationship--2fc70748-7bec-563b-be36-1b10cbe0c020", "relationship--0c96c22f-125d-5dc2-8a47-5cf1fb9d863e", "relationship--c0c5f118-be21-5832-84d5-9fc343a7a713", "relationship--7dfd9ba9-bc98-5d49-9319-f7489cb7d9e2", "relationship--6311ccee-6368-5a06-85d3-e095439639ec", "relationship--b9230f24-042a-5a82-a94b-eb0509a6e7a2", "relationship--403d00a3-b18c-5b4b-b2b2-f4f01859b577", "relationship--2dc035f6-ca46-5a78-827c-9fea268ee4b0", "relationship--22d92b0a-f0f9-519f-b359-4c4b2d5cd4e9", "relationship--1c8ea1b1-6475-566d-9605-6b55b79478e3", "relationship--9a56ef1a-763c-5073-9779-d23122cf0781", "relationship--a29f9c04-7229-5404-ba68-1acc19de7fd1", "relationship--00f87eca-236e-542c-b520-411df2ffe009", "relationship--3f79aea2-2aba-545d-9bac-61a87457c063", "relationship--81689a9f-afbb-5e46-9e03-27870deb6236", "relationship--35b6ddf9-2e7d-54f7-bb5d-ea729ef40e8f", "relationship--094680f5-e5c2-5b00-a3f4-230f392f7396", "relationship--7db7a37b-b0af-5cf0-b1c1-5f79fd6f54a4", "relationship--73095fe6-d1c0-5d99-8629-b5e57e098421", "relationship--01dac579-9ead-58e7-857c-6726b389dde4", "relationship--dd478e3a-c0aa-5ae0-8adc-8f5361e0f8ac", "relationship--91e1138b-2074-5a92-b8fc-5658dcbd2974", "relationship--6163dac6-2473-5a70-a5f5-d36e30345ab8", "relationship--51ff1e68-d4d9-595b-8f82-8e3931b8b07c", "relationship--6360eedf-3a5d-5865-b722-906122c997ed", "relationship--c7744006-dc36-52c2-b0b4-44e28145de94", "relationship--5fea860c-9d10-5da1-8b49-eea1ee8d9ed5", "relationship--05e788f9-391f-5202-a2a0-18bd94af33cb", "relationship--518de248-f071-5a93-89df-a4ce4e85ff24", "relationship--1ba9d94b-2628-55f1-971d-924d94c924d5", "relationship--9839ba46-e2f9-59cb-9343-864bb27cbf14", "relationship--eca07a24-e0db-51f6-b603-2424585fb2e6", "relationship--46b8c749-9b05-56fc-aecb-ea078129df64", "relationship--7e98aa8f-7156-5495-901f-bc11b5bb6433", "relationship--7f3e065c-8793-5231-8054-9201f57c9801", "relationship--1f021657-b351-5a8c-837d-1e45bf2073f3", "relationship--5a060d78-4e4d-5a42-99f3-c028b46060e4", "relationship--66a9c17d-821c-55aa-8191-aeeaa45ea80e", "relationship--d3dbebcb-c141-52c7-b867-8c1390450b8a", "relationship--8e1a8191-52ba-5417-b8aa-ee582993dbb0", "relationship--665e4b4f-c2dc-5e7e-bee7-9cefcc2f7ee3", "relationship--9a0a1b43-a214-575a-8513-8aebe415c70a", "relationship--fbec8241-661a-5d15-a6f6-6417cd34a002", "relationship--caa5f050-c864-5122-89d5-0247d9d35857", "relationship--887028ac-1aa6-5dbe-8f2a-e75d6ef672ce", "relationship--70891d75-e5b9-51c0-8a52-909d90f75492", "relationship--41dac04e-c03f-5545-8df3-7d2ac6247bb1", "relationship--3964a529-561e-502e-b243-b61adf0a05e4", "relationship--08cb6574-dddc-52cf-ada5-4e32e0b4999f", "relationship--3500dda8-3440-5617-8228-e0acdd9b3a39", "relationship--8cf5707e-8028-5357-829b-ed90b4801c48", "relationship--727e1593-bbd7-5ae8-baab-3fd4bb5914db", "relationship--cf454c81-7740-5ee2-a0d8-9c9d9bf9aa4c", "relationship--e667923c-6b05-57b6-8471-20d97c8815df", "relationship--8de2c26f-26ce-59a0-9804-eb310a50ffef", "relationship--b2673640-12f6-5acc-9af4-00cf8f338093", "relationship--fdc8179d-ab8b-54dd-9a7b-16699c49af62", "relationship--ec5291ff-c43f-5eaa-aa28-b3cb26246dc8", "relationship--21e6029d-3456-5e6d-ac10-2c051cc435e5", "relationship--4130d90b-f4d4-5f17-8865-a8bd11f1f0b5", "relationship--53919cdf-b52b-50b9-b8bb-1b9f4060b2fa", "relationship--81498388-d01f-5559-8825-032c6fa8cb25", "relationship--1077b1d8-2080-515b-9e29-05b44fded641", "relationship--e8c26c1b-892e-5327-8bae-67e4837be486", "relationship--1e056030-aa60-5c55-99be-ce784808142e", "relationship--8a75f414-ff79-5448-bbf8-f09f3436a488", "relationship--01a1c82f-d45d-507a-8152-56f016799c4e", "relationship--96b3ae97-c982-54b4-8696-25a8301291af", "relationship--1ab721e7-b98e-58ac-b1e1-18622949cdc8", "relationship--d1701cd9-15a2-5e8f-ab0a-d5c18890ea7f", "relationship--0fbe26f5-141b-57aa-b0d0-63c0ec4fa1d0", "relationship--cdd16d70-3906-511a-945e-02ceafb83cd6", "relationship--460a1d8b-2d95-5a94-8f96-04a362dd6e9f", "relationship--afaf418d-bc1b-5237-9c9d-eb9e6ce5b683", "relationship--9c2602f6-09e5-540a-84e9-e2012f41a509", "relationship--27ee45a5-9b12-5b47-84cf-85c3fe458df0", "relationship--d5dbdea8-ef66-535e-82c2-7195c0097a66", "relationship--4afbadd1-c563-5b0f-b914-a30c425494d7", "relationship--560ca534-d818-5332-a6b2-82443b3352f0", "relationship--f2e28e05-846d-5752-b2e1-7ac2061ab2fb", "relationship--9cbc5195-1b83-5223-b016-0d912148ce5b", "relationship--b81bb21d-24c4-580e-b338-612531bebf74", "relationship--9188d306-4dfd-5c09-8ec6-f81a8901adc1", "relationship--e7ace2c8-d1d1-5535-9084-eb0e9f645da9", "relationship--ae7f39ef-2405-506c-b67a-c94882d4f701", "relationship--4acb9a87-bb33-5943-affd-148b4d6fe435", "relationship--f946b66d-1eb8-53a6-a1f8-a4563dc8b14a", "relationship--6a9895ba-45bb-59ae-bb69-0ee64b6d1475", "relationship--22ee5f22-1ab1-5e1c-8fb1-e7bc574f0f7e", "relationship--e7664c74-270c-5dcc-9182-41987445b628", "relationship--e1d82dc5-5884-501f-83a1-5705b8885b71", "relationship--3a42c165-06a3-59cb-a83f-0832ada77e60", "relationship--091cde1e-9f48-5e47-aed0-a35b18f09349", "relationship--d7360d44-9623-5a1d-9945-e043a6a09a85", "relationship--b691555a-8e3d-5b32-9941-23ed5e4e51e8", "relationship--07f26326-1cc0-5b12-9b14-bbd8ea7c1988", "relationship--e2962798-308e-5faa-bb8f-bee5c5863287", "relationship--bda271d2-0f01-5ef1-aa74-fc066a0bf12a", "relationship--64f8812d-69fc-51a3-a281-35450f0d2b85", "relationship--c1eac889-0d7c-57de-b7f4-bbaf9afeb937", "relationship--6a13ca69-9e60-5453-b123-deea52084c8b", "relationship--aa0d7f82-749a-59c6-a3bc-6ede9dad688d", "relationship--3621e8e5-4735-5349-8d22-753bdb9c188f", "relationship--a8ca5e0e-af9c-55d2-89f2-68a904d533e3", "relationship--a617004d-3fca-5d85-8a59-d9cb538586bb", "relationship--cafd9eef-6170-5d72-8706-a1769da9fa49", "relationship--3b01c282-14dd-5f91-ab40-8096e10b2121", "relationship--4cb5f8e3-d206-5dc7-907a-b76c5acef57b", "relationship--fd85c625-b67c-5fc8-a847-6a22ac312c8d", "relationship--ca8b180e-7bcd-55e5-a786-40b7822a242c", "relationship--7a440a1b-4cca-54e2-96c7-24f8e1c6fe7f", "relationship--1b701f0b-ddb5-5647-9940-4fb40a412574", "relationship--5d4bb00a-2cc4-5ba1-a151-d40868f774a6", "relationship--8170451e-892e-564c-b964-500a6e3ed50c", "relationship--a11e0c57-64c3-5426-8705-5900e49a0897", "relationship--48b88419-7edc-5e91-8720-667b3318cd88", "relationship--c4a911bf-9245-5eb8-9719-0ca3a8abab63", "relationship--88c4207c-ce42-5d55-8b0f-82ef847b365b", "relationship--2ddba0a6-b75f-5cee-974c-9af13353a4f7", "relationship--07f138af-5a9d-5098-8592-29026a0ad02e", "relationship--0a9503a7-f626-56b1-9143-ac303bd42b24", "relationship--f7d83ad7-a9ee-57d1-b75c-c9536017efdb", "relationship--31602f39-eec9-5925-98f1-fb8918227cfd", "relationship--a23b5f70-0bcc-5d3a-9d27-114c3486abf1", "relationship--7da00410-55fe-5b79-bd07-35b8740f9ced", "relationship--a5a830b3-efff-5679-a4eb-42166518f7f1", "relationship--625573f9-98d4-5c06-9ff2-ec8c75edaf2e", "relationship--2d9dab1f-3537-5984-a093-276ac8e35d00", "relationship--e1028aba-1bde-5694-937a-abfbdb963f48", "relationship--b075cfc6-9899-52ba-afcd-eee055085bf1", "relationship--756ada13-9c0a-506f-bb54-ae1d7caea490", "relationship--8aaec77a-6442-5d3e-8f15-e16b1fd66a1c", "relationship--d799f5d7-92d6-5fc1-8386-ec58330af7b5", "relationship--0e909aea-90eb-5c29-8556-e791a017cd1a", "relationship--4915fea2-7530-55c2-85ca-f4694504d036", "relationship--8f1fd9cd-4f47-5fb5-87f3-d7dba4218e5c", "relationship--47b216fb-33ee-5b9f-af38-760e867687a9", "relationship--c6b2abdc-7c14-5da3-a244-b99861fb8aea", "relationship--d8bc91ba-3c17-5782-884e-8fa62c1042c8", "relationship--6fd150a4-2f7f-521a-8879-367867ad8b10", "relationship--e5eeeaf6-4abf-5890-8172-37d55ab14fbb", "relationship--cc2e54e6-0877-572c-ac39-6ebc018db53a", "relationship--4e7f4bac-daeb-5c98-867c-d02b7c18c0bb", "relationship--e5eeaa2d-df5f-5457-8e0b-5ac11c7cb5bf", "relationship--5ab333f0-8b24-5d9c-b3c5-572189a59256", "relationship--8c52e3e5-8f91-5b3f-90cb-f8ef5aa8e133" ], "labels": [ "PhaaS", "Phishing", "Cred Theft", "Open Dir" ], "external_references": [ { "source_name": "The Hunters Ledger", "url": "https://the-hunters-ledger.com/reports/bellamain-turkish-phaas-79-137-192-3-20260516/" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] } ] }