{
"type": "bundle",
"id": "bundle--e13f9f9c-6928-46f0-b059-36c877356318",
"objects": [
{
"type": "identity",
"spec_version": "2.1",
"id": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.151559Z",
"modified": "2026-10-01T19:54:13.151559Z",
"name": "The Hunters Ledger",
"identity_class": "organization"
},
{
"type": "marking-definition",
"spec_version": "2.1",
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
"created": "2017-01-20T00:00:00.000Z",
"definition_type": "tlp",
"name": "TLP:WHITE",
"definition": {
"tlp": "white"
}
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--3d790e8d-67e1-5b55-ad95-a33d6bd0f109",
"value": "144.172.103.98"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--46b7e506-045a-5849-bf54-0e519b3e0f41",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.152103Z",
"modified": "2026-10-01T19:54:13.152103Z",
"name": "ipv4: 144.172.103.98",
"description": "Origin open directory (KAIDO Services), AS14956 RouterHosting US, DEAD as of 2026-06-27",
"indicator_types": [
"malicious-activity"
],
"pattern": "[ipv4-addr:value = '144.172.103.98']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 95
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--0cc954d0-ab7e-5403-b760-ecce89342889",
"value": "144.172.109.203"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--bb14b624-d5e8-5f37-bd0e-c6226f7c9cf4",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.154893Z",
"modified": "2026-10-01T19:54:13.154893Z",
"name": "ipv4: 144.172.109.203",
"description": "Live KAIDO Quasar RAT C2, AS14956 RouterHosting US; :8443 TeamKAIDO cert; :4782 Quasar protocol (PART A)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[ipv4-addr:value = '144.172.109.203']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--23b2f09e-cec0-5eb7-afe8-88f3d5f79d8a",
"value": "179.43.150.50"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--98fc5b94-ab86-5d56-8310-f18fce62bda3",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.155298Z",
"modified": "2026-10-01T19:54:13.155298Z",
"name": "ipv4: 179.43.150.50",
"description": "Current kaidoo.com.br A-record, AS51852 Private Layer CH; passive only. Do not probe (PART A)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[ipv4-addr:value = '179.43.150.50']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 60,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 60
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--73f24759-34fb-55a8-9082-527356702c28",
"value": "198.1.195.207"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--8f63ccdb-688d-54d9-8abd-bc25cf65d8fd",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.155684Z",
"modified": "2026-10-01T19:54:13.155684Z",
"name": "ipv4: 198.1.195.207",
"description": "EvilSoul builder default panel, AS210554 Meteor Cloud / MagnoHost BR (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[ipv4-addr:value = '198.1.195.207']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 80,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 80
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--c5efe09e-80e4-5b8c-9d58-d0868a2ae828",
"value": "198.1.195.210"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--956b16bd-2868-5b75-a188-d4aa82f16bd8",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.156022Z",
"modified": "2026-10-01T19:54:13.156022Z",
"name": "ipv4: 198.1.195.210",
"description": "EvilSoul webhook-resolution relay /tralalero + evilsoul.cc historical A-record host, MagnoHost BR (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[ipv4-addr:value = '198.1.195.210']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "ipv4-addr",
"spec_version": "2.1",
"id": "ipv4-addr--9987ebe4-0759-52d4-b134-98abaa18b54d",
"value": "198.89.99.163"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--fbbe1eb6-7aa4-50fb-8a5d-6ddf9ca8196f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.156349Z",
"modified": "2026-10-01T19:54:13.156349Z",
"name": "ipv4: 198.89.99.163",
"description": "Old evilsoul1337.xyz host, MagnoHost BR; co-hosts a Brazilian CPF/name doxing API and romahosting Pterodactyl panel (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[ipv4-addr:value = '198.89.99.163']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 60,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 60
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--afca77a1-8e44-570b-9584-63d3356769d3",
"value": "c2.kaidoo.com.br"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--e7cc84a5-aa27-5a54-a7cf-38dc1dfa5d40",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.156866Z",
"modified": "2026-10-01T19:54:13.156866Z",
"name": "domain: c2.kaidoo.com.br",
"description": "KAIDO Quasar RAT secondary C2 (port 443) (PART A)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[domain-name:value = 'c2.kaidoo.com.br']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--ea881463-6ef4-55f6-90e3-f31fef1715e8",
"value": "choix-relay.com"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--06a03fd5-b55a-56cd-b60f-8355d15ecbd5",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.157542Z",
"modified": "2026-10-01T19:54:13.157542Z",
"name": "domain: choix-relay.com",
"description": "French 'choix' domain co-resident on the Swiss KAIDO host; possible parallel phishing line (PART A/B), MODERATE-LOW",
"indicator_types": [
"malicious-activity"
],
"pattern": "[domain-name:value = 'choix-relay.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 40,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 40
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--0fc12c42-c1db-542c-8c8e-19e19784f2da",
"value": "evilsoul.cc"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--314ef298-f608-5c92-8c57-fe5a93a11da3",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.157975Z",
"modified": "2026-10-01T19:54:13.157975Z",
"name": "domain: evilsoul.cc",
"description": "EvilSoul Socket.IO C2 (299a2e7f build); DNS confirmed in detonation (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[domain-name:value = 'evilsoul.cc']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 95
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--11956e8f-7958-5e4d-ad6f-21f43f9f006b",
"value": "evilsoul.xyz"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--5ba0936a-572c-5afb-8f14-098cf4458169",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.158367Z",
"modified": "2026-10-01T19:54:13.158367Z",
"name": "domain: evilsoul.xyz",
"description": "Maploot/Tinarox primary backend (/dcinjection-send, /upload-txts, /download/panel, /download/decrypter) (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[domain-name:value = 'evilsoul.xyz']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 95
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--9ea827e8-2129-5237-89c3-bbad62dc4eab",
"value": "evilsoul1337.xyz"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--603fbed9-f0f3-5e2e-895a-e67ecffa041d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.158709Z",
"modified": "2026-10-01T19:54:13.158709Z",
"name": "domain: evilsoul1337.xyz",
"description": "'EvilSoul Panel' domain, MagnoHost BR (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[domain-name:value = 'evilsoul1337.xyz']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 60,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 60
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--be8aa977-a7ec-586a-be3a-b5f7db8fac47",
"value": "http://198.1.195.210:3000/tralalero"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--61e25531-4098-560f-94c8-fc8348e38fed",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.159048Z",
"modified": "2026-10-01T19:54:13.159048Z",
"name": "url: http://198.1.195.210:3000/tralalero",
"description": "EvilSoul webhook-resolution relay; POSTs {key} receives {webhook} (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[url:value = 'http://198.1.195.210:3000/tralalero']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--6f3b0478-0aba-5066-a1ea-2b5921c39d20",
"value": "http://evilsoul.cc/socket.io/?EIO=4&transport=polling"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--d5ab16b9-949e-5aae-b1c3-e66c32b648b4",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.159581Z",
"modified": "2026-10-01T19:54:13.159581Z",
"name": "url: http://evilsoul.cc/socket.io/?EIO=4&transport=polling",
"description": "EvilSoul Socket.IO v4 C2 handshake (299a2e7f) (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[url:value = 'http://evilsoul.cc/socket.io/?EIO=4&transport=polling']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--74756ddf-261c-5b39-9ce8-bfed75793359",
"value": "http://evilsoul.xyz/download/decrypter/chrome_inject.exe"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--1087c29b-b9b4-5cc5-a14f-f05641aaab07",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.160048Z",
"modified": "2026-10-01T19:54:13.160048Z",
"name": "url: http://evilsoul.xyz/download/decrypter/chrome_inject.exe",
"description": "EvilSoul backend's own Chrome ABE-bypass injector (Maploot analog) (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[url:value = 'http://evilsoul.xyz/download/decrypter/chrome_inject.exe']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 80,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 80
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--33c78969-2d62-5f9e-a3c8-14e42455bd70",
"value": "https://acf02ac96211.ngrok-free.app"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--697def34-d9ed-5244-8717-5c3e2140b1aa",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.160488Z",
"modified": "2026-10-01T19:54:13.160488Z",
"name": "url: https://acf02ac96211.ngrok-free.app",
"description": "Operator ngrok tunnel for panel download (shared across Maploot+Tinarox) | MODERATE, ngrok-free.app is a shared tunneling service; the specific subdomain is operator-unique (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[url:value = 'https://acf02ac96211.ngrok-free.app']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 95
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--4842c4fb-587a-55f6-9fb1-871bf623ec78",
"value": "https://github.com/sqlban/configs/raw/refs/heads/main/chrome_decrypt.dll"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--125571e3-db6a-5a86-8b53-13422a34b715",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.16087Z",
"modified": "2026-10-01T19:54:13.16087Z",
"name": "url: https://github.com/sqlban/configs/raw/refs/heads/main/chrome_decrypt.dll",
"description": "Chrome ABE-bypass DLL download (299a2e7f supply chain); account now 404 (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[url:value = 'https://github.com/sqlban/configs/raw/refs/heads/main/chrome_decrypt.dll']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--2a449c37-117c-53d5-8a17-99669927f4b6",
"value": "https://github.com/sqlban/configs/raw/refs/heads/main/chromelevator.exe"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--b0aba044-09e1-5f37-81f9-0d3102877d55",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.161242Z",
"modified": "2026-10-01T19:54:13.161242Z",
"name": "url: https://github.com/sqlban/configs/raw/refs/heads/main/chromelevator.exe",
"description": "Chrome ABE-bypass tool download (299a2e7f supply chain); account now 404 (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[url:value = 'https://github.com/sqlban/configs/raw/refs/heads/main/chromelevator.exe']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--c10f3cc2-0cbb-587a-8a04-07032876b6cb",
"value": "https://store8.gofile.io/uploadFile"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--b7fa97ff-0977-5334-8f3d-1d290e5a141d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.161585Z",
"modified": "2026-10-01T19:54:13.161585Z",
"name": "url: https://store8.gofile.io/uploadFile",
"description": "Loot-zip upload sink (Maploot/Tinarox/299a2e7f) | HIGH, gofile.io is a shared legitimate file-hosting service; pin on the full upload behavior + accompanying IOCs, not the domain alone (PART B)",
"indicator_types": [
"anomalous-activity"
],
"pattern": "[url:value = 'https://store8.gofile.io/uploadFile']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 95
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--ed0f5ce9-4850-50bd-a64e-1a7c3617c5cf",
"value": "kaidoo.com.br"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--f728748b-968a-5d9d-998e-e1967686ca2e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.161946Z",
"modified": "2026-10-01T19:54:13.161946Z",
"name": "domain: kaidoo.com.br",
"description": "KAIDO Quasar RAT primary C2 (port 4782); DNS confirmed in detonation (PART A)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[domain-name:value = 'kaidoo.com.br']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--4eecb7d0-2ae7-5da5-a50e-c2c42f64f6b4",
"value": "pay.x4m1k.com"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--64f68ffd-5598-5e75-a8e6-108679f2ff53",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.162298Z",
"modified": "2026-10-01T19:54:13.162298Z",
"name": "domain: pay.x4m1k.com",
"description": "0xK41 MaaS sales/payment page (Cloudflare) (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[domain-name:value = 'pay.x4m1k.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 80,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 80
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--d2f6c00a-5f40-55f7-abd0-fad84b210151",
"value": "systemtools.dev"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--fa541fcc-cf72-5c01-a6a3-2955fecb96b8",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.162646Z",
"modified": "2026-10-01T19:54:13.162646Z",
"name": "domain: systemtools.dev",
"description": "Decoy cover-identity homepage injected into built payloads (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[domain-name:value = 'systemtools.dev']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 60,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 60
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--4dea3ea7-6c0e-54b4-8e89-05dcbc4dc641",
"value": "www.kaidoo.com.br"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--6907b9eb-f4b5-5b94-83a6-6543590c8b03",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.162988Z",
"modified": "2026-10-01T19:54:13.162988Z",
"name": "domain: www.kaidoo.com.br",
"description": "KAIDO brand domain (PART A)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[domain-name:value = 'www.kaidoo.com.br']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 80,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 80
},
{
"type": "domain-name",
"spec_version": "2.1",
"id": "domain-name--7f9bae1e-544b-55cc-91c4-ccf5885895eb",
"value": "x4m1k.com"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--699fd09a-14e8-5b34-9a19-642042da338b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.163325Z",
"modified": "2026-10-01T19:54:13.163325Z",
"name": "domain: x4m1k.com",
"description": "'0xK41 Panel' control-plane front, A-record to origin 144.172.103.98 (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[domain-name:value = 'x4m1k.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 80,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 80
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--2d19688b-470b-5e10-95ec-c25d8259ae59",
"hashes": {
"SHA-256": "022944768c4326d611fa3edb100eb8277228717a220580e7ffce143341aa39fa"
}
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--d487abaa-2f25-5cb8-99d3-61c096417f12",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.163795Z",
"modified": "2026-10-01T19:54:13.163795Z",
"name": "sha256: 022944768c4326d611fa3edb100eb8277228717a220580e7ffce143341aa39fa",
"description": "KAIDO Quasar RAT, low-detection sibling (PART A)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[file:hashes.'SHA-256' = '022944768c4326d611fa3edb100eb8277228717a220580e7ffce143341aa39fa']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--93558544-aa91-52fd-a95d-2d6fc7c4de44",
"hashes": {
"SHA-256": "0e7d6bade5a05e7b021683eba1a61f4aecbce2bd3cf3bee70cf12e995304c3a0"
}
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--2d5de675-6a31-5287-a80e-8da1d8bf7ddc",
"hashes": {
"SHA-256": "19e970052401aa72aa3d5a1145fbef9ac57a6d3a39f47e618b575ff88283797a"
}
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--5607a0be-1a3e-57da-894f-cf291eed3b54",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.1652Z",
"modified": "2026-10-01T19:54:13.1652Z",
"name": "sha256: 19e970052401aa72aa3d5a1145fbef9ac57a6d3a39f47e618b575ff88283797a",
"description": "EvilSoul builder_index.js (Builder API) (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[file:hashes.'SHA-256' = '19e970052401aa72aa3d5a1145fbef9ac57a6d3a39f47e618b575ff88283797a']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 95
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--6bd7f850-8a40-5da6-ad61-66e5882f8223",
"hashes": {
"SHA-256": "299a2e7fa8a69c495ec19fecf55d93bb766addaa78e89a4e1ad78a9cea59b31c"
}
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--cfb90865-9bc0-53ac-ab5e-20b3e1331a41",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.165606Z",
"modified": "2026-10-01T19:54:13.165606Z",
"name": "sha256: 299a2e7fa8a69c495ec19fecf55d93bb766addaa78e89a4e1ad78a9cea59b31c",
"description": "EvilSoul Socket.IO WebPanel RAT build (81.9 MB pkg-Node), C2 evilsoul.cc (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[file:hashes.'SHA-256' = '299a2e7fa8a69c495ec19fecf55d93bb766addaa78e89a4e1ad78a9cea59b31c']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--9ebd87da-8486-5612-b890-edb22c10e90e",
"hashes": {
"SHA-256": "2b1eb8470193d40c6b9f9844e4bba958103c4a629aa7d214658ce0199bf9373c"
}
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--0a3d4b6c-aab7-5faa-bc4a-b88c74c39f5e",
"hashes": {
"SHA-256": "2b23eed25f5885ca2652fde9f277b295de6ef0dbcdcce0826c4fd734b34dc0b8"
}
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--dd61191b-3130-5b3f-9dab-5eeb93e23d04",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.166121Z",
"modified": "2026-10-01T19:54:13.166121Z",
"name": "sha256: 2b23eed25f5885ca2652fde9f277b295de6ef0dbcdcce0826c4fd734b34dc0b8",
"description": "EvilSoul index.js orchestrator (forks 4 services) (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[file:hashes.'SHA-256' = '2b23eed25f5885ca2652fde9f277b295de6ef0dbcdcce0826c4fd734b34dc0b8']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 95
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--82831ab5-8d90-5114-9366-1e6684c24502",
"hashes": {
"SHA-256": "385d20ca574976e3ba3f4f3079420f8a1c3935c0ab4a3f87063beea27d41e254"
}
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--595e7e26-9368-5b2b-8adf-87b418b18f01",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.166499Z",
"modified": "2026-10-01T19:54:13.166499Z",
"name": "sha256: 385d20ca574976e3ba3f4f3079420f8a1c3935c0ab4a3f87063beea27d41e254",
"description": "KAIDO Quasar RAT, live-C2 sibling, c2.kaidoo.com.br:443 (PART A)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[file:hashes.'SHA-256' = '385d20ca574976e3ba3f4f3079420f8a1c3935c0ab4a3f87063beea27d41e254']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--17b6f01f-1ee7-540c-83f7-e40387ab9e45",
"hashes": {
"SHA-256": "68f438ac293c749ebf9f71001ce5f976a34465c44c58f7b98bd3e2d1618c3366"
}
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--2762220b-ffc6-5085-a1d5-e9ee6ddec12f",
"hashes": {
"SHA-256": "763303b69ad589bef248b66d1db93d5e567d9d60f95511806289289ff42a548e"
}
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e648c4-f76f-5b8f-ab45-313fd3b3457f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.167003Z",
"modified": "2026-10-01T19:54:13.167003Z",
"name": "sha256: 763303b69ad589bef248b66d1db93d5e567d9d60f95511806289289ff42a548e",
"description": "Maploot.msi EvilSoul Electron stealer (172 MB) (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[file:hashes.'SHA-256' = '763303b69ad589bef248b66d1db93d5e567d9d60f95511806289289ff42a548e']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--2e8f5bf6-9acc-58d8-82aa-b890cd99cdeb",
"hashes": {
"SHA-256": "787624b4414a7553a50dc65e037cef8cdd5bb8ea4d79a26b9e6aee5ebb6cf8a6"
}
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--9b02a63f-39be-59ed-8d17-cff69556940c",
"hashes": {
"SHA-256": "7eb134384e6afbaa910f5670d29f32305aff4f5ec0fdbb3b34fec848a4ea24da"
}
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--34ec8840-df42-5236-87a3-f9c85c1a6755",
"hashes": {
"SHA-256": "934185683e2294f063bcb60b883b7cd518a2ec468597441adfbadc679c0112c8"
}
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--d46575fb-77ca-5c7a-9f5a-abeb14eecba4",
"hashes": {
"SHA-256": "940bdf8421ace41cd9a93957122feed9faf0db02016c4b9daf4aeac7c0c794ed"
}
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--0e4ece88-fc55-526f-9584-72c0fdad8fbe",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.16764Z",
"modified": "2026-10-01T19:54:13.16764Z",
"name": "sha256: 940bdf8421ace41cd9a93957122feed9faf0db02016c4b9daf4aeac7c0c794ed",
"description": "EvilSoul obfuscator.js (js-confuser+AES-GCM+XOR packer) (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[file:hashes.'SHA-256' = '940bdf8421ace41cd9a93957122feed9faf0db02016c4b9daf4aeac7c0c794ed']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 95
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--70020f4e-d0a7-5051-baf3-a91adf1b5385",
"hashes": {
"SHA-256": "9e26f198ba185fcda834d3c7b7ae074baf6cea65a3261dfc85a7cc9295e5a9d2"
}
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--04828ab9-acbe-5647-9089-fbb8b0cce223",
"hashes": {
"SHA-256": "b90100d58b5807139eec66ed4e414bfcecdc369ddd5307e8d0fe2be90dcccde5"
}
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--be28ff7e-3d67-52b7-9f08-d4e4132d19be",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.168154Z",
"modified": "2026-10-01T19:54:13.168154Z",
"name": "sha256: b90100d58b5807139eec66ed4e414bfcecdc369ddd5307e8d0fe2be90dcccde5",
"description": "EvilSoul stealer.js (0xK41) payload source (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[file:hashes.'SHA-256' = 'b90100d58b5807139eec66ed4e414bfcecdc369ddd5307e8d0fe2be90dcccde5']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 95
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--29e6b330-8a25-5756-a600-9d430add4afa",
"hashes": {
"SHA-256": "bfd3fe4ff947e29d3d33bf36c54be271bfec5885378990b3799570b402ab38bd"
}
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--20b2c0f9-0698-505b-9dd3-8c86e68b44f0",
"hashes": {
"SHA-256": "c7542e8265f70d6c1dbf2e3cf6e81a90198cd157d3d6693c6d2a8a49d99a5b8d"
}
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--f6a4ebb0-f9e8-5832-8f9f-cb0159f65675",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.168635Z",
"modified": "2026-10-01T19:54:13.168635Z",
"name": "sha256: c7542e8265f70d6c1dbf2e3cf6e81a90198cd157d3d6693c6d2a8a49d99a5b8d",
"description": "KAIDO Quasar RAT, tag 'breach', C2 kaidoo.com.br:4782 (PART A)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[file:hashes.'SHA-256' = 'c7542e8265f70d6c1dbf2e3cf6e81a90198cd157d3d6693c6d2a8a49d99a5b8d']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--030bae2d-cded-514c-8e0f-5d867d291a74",
"hashes": {
"SHA-256": "cb679a4f6381f366d89c237cf07fcb09580b2e3c10c1e03a813a538e6e574c70"
}
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--56a34f85-8e23-5d22-9a77-df8b41df6dcd",
"hashes": {
"SHA-256": "ce357b006e2c8df3a093332242d90832b023456eae272ce2c8610363107152dd"
}
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--36a0fce0-dcf2-5e16-840b-349852d017e4",
"hashes": {
"SHA-256": "dd08fe79932b83890eb7811b59fe8bed37423384194cd9537ef4d8ab27b99b99"
}
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--62129313-651a-540e-92c8-cf60ed76ced6",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.169184Z",
"modified": "2026-10-01T19:54:13.169184Z",
"name": "sha256: dd08fe79932b83890eb7811b59fe8bed37423384194cd9537ef4d8ab27b99b99",
"description": "EvilSoul panel.exe WebPanel (pkg-Node) (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[file:hashes.'SHA-256' = 'dd08fe79932b83890eb7811b59fe8bed37423384194cd9537ef4d8ab27b99b99']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": false,
"x_opencti_score": 95
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--ce9e2382-3cbe-5063-aac1-c663dc3f931f",
"hashes": {
"SHA-256": "dd97278cc64d0a8fbdb66f177367c29d2557dd445b306e922e9ad5660ea233e2"
}
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--b5a6f4bb-b6c4-5cf8-b082-a4b3e7588f60",
"hashes": {
"SHA-256": "fc53e32f7aec1789b26a0c4c46397306f9ba332ccf9babb657bc41eef868ff0e"
}
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--c9a4fb0d-da5e-5701-aad2-83f61c76e61f",
"hashes": {
"SHA-256": "fe55908030318879f08b185b9c5b6e6f9d6f691154c361d60cce80162d844212"
}
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--5d491a50-d8d8-545c-a4e5-bfa2eb5b66f3",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.169747Z",
"modified": "2026-10-01T19:54:13.169747Z",
"name": "sha256: fe55908030318879f08b185b9c5b6e6f9d6f691154c361d60cce80162d844212",
"description": "Tinarox.msi EvilSoul Electron stealer (Maploot twin) (PART B)",
"indicator_types": [
"malicious-activity"
],
"pattern": "[file:hashes.'SHA-256' = 'fe55908030318879f08b185b9c5b6e6f9d6f691154c361d60cce80162d844212']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2026-07-03T00:00:00Z",
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
],
"x_opencti_detection": true,
"x_opencti_score": 95
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--5c601fee-ef41-52ff-b6e2-d26bb274d903",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.175726Z",
"modified": "2026-10-01T19:54:13.175726Z",
"name": "EvilSoul_Engine_Obfuscator_XOR_Key",
"indicator_types": [
"malicious-activity"
],
"pattern": "/*\n Yara Rule Set\n Identifier: EvilSoul-Engine Stealer-Builder MaaS - Kit-Wide Obfuscator Anchors\n Author: The Hunters Ledger\n Source: https://the-hunters-ledger.com/\n License: CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\n*/\n\nrule EvilSoul_Engine_Obfuscator_XOR_Key {\n meta:\n description = \"Detects EvilSoul-Engine stealer-builder MaaS output via the operator's hardcoded obfuscator XOR key constant and catchphrase comment, which survive js-confuser because they reside in the loader stage rather than the packed payload\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/evilsoul-engine-stealer-maas-detections/\"\n date = \"2026-07-03\"\n hash1 = \"940bdf8421ace41cd9a93957122feed9faf0db02016c4b9daf4aeac7c0c794ed\"\n family = \"EvilSoul-Engine\"\n malware_type = \"Stealer-Builder\"\n campaign = \"EvilSoul-Engine-Stealer-MaaS-144.172.103.98\"\n id = \"5dddfdb6-6a13-54aa-83ed-65e27f52ac3b\"\n strings:\n $xor_key = \"see-you-in-the-hellwizard-1082@239$328927bA\" ascii wide\n $catchphrase = \"wizard see you in the hell\" ascii wide\n $debug_file = \"kaido_debug.txt\" ascii wide fullword\n $token_decoder = \"D2VGTBwNZh8zV2A=\" ascii wide\n condition:\n filesize < 200MB and\n ($xor_key or ($catchphrase and 1 of ($debug_file, $token_decoder)))\n}",
"pattern_type": "yara",
"valid_from": "2026-07-03T00:00:00Z",
"labels": [
"detection-rule"
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--8eb1f406-6c2e-5e24-9e82-0f764aa3a4af",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.175847Z",
"modified": "2026-10-01T19:54:13.175847Z",
"name": "EvilSoul_Engine_Maploot_Tinarox_Embed_Titles",
"indicator_types": [
"malicious-activity"
],
"pattern": "/*\n Yara Rule Set\n Identifier: EvilSoul-Engine Stealer-Builder MaaS - Maploot/Tinarox Electron Builds\n Author: The Hunters Ledger\n Source: https://the-hunters-ledger.com/\n License: CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\n*/\n\nrule EvilSoul_Engine_Maploot_Tinarox_Embed_Titles {\n meta:\n description = \"Detects EvilSoul-Engine Maploot/Tinarox Electron stealer builds via their branded Discord-embed exfil title strings, confirmed byte-for-byte shared across both game-masquerade builds after webcrack de-obfuscation\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/evilsoul-engine-stealer-maas-detections/\"\n date = \"2026-07-03\"\n hash1 = \"763303b69ad589bef248b66d1db93d5e567d9d60f95511806289289ff42a548e\"\n hash2 = \"fe55908030318879f08b185b9c5b6e6f9d6f691154c361d60cce80162d844212\"\n family = \"EvilSoul-Engine\"\n malware_type = \"Stealer (Electron)\"\n campaign = \"EvilSoul-Engine-Stealer-MaaS-144.172.103.98\"\n id = \"7c0ba54a-cfe9-5363-b03c-52a5b183535e\"\n strings:\n $embed1 = \"EvilSoul Stealer - (Discord ~\" ascii wide\n $embed2 = \"EvilSoul Stealer - (BrowserData ~\" ascii wide\n $embed3 = \"EvilSoul (Exodus Session and BruteForce)\" ascii wide\n $embed4 = \"EvilSoul (Steam Session)\" ascii wide\n $embed5 = \"EvilSoul (Minecraft Session)\" ascii wide\n $masquerade = \"Unreal Game Inc.\" ascii wide\n $endpoint1 = \"dcinjection-send\" ascii wide\n $endpoint2 = \"upload-txts\" ascii wide\n condition:\n filesize < 250MB and\n (2 of ($embed*) or (1 of ($embed*) and ($masquerade or 1 of ($endpoint*))))\n}",
"pattern_type": "yara",
"valid_from": "2026-07-03T00:00:00Z",
"labels": [
"detection-rule"
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--d9213b19-02af-5913-831c-73018b12b053",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.175941Z",
"modified": "2026-10-01T19:54:13.175941Z",
"name": "EvilSoul_Engine_299a2e7f_SocketIO_WebPanel",
"indicator_types": [
"malicious-activity"
],
"pattern": "/*\n Yara Rule Set\n Identifier: EvilSoul-Engine Stealer-Builder MaaS - 299a2e7f Socket.IO WebPanel Variant\n Author: The Hunters Ledger\n Source: https://the-hunters-ledger.com/\n License: CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\n*/\n\nrule EvilSoul_Engine_299a2e7f_SocketIO_WebPanel {\n meta:\n description = \"Detects the EvilSoul-Engine 299a2e7f Socket.IO WebPanel RAT build via its distinctive args-file suffix, WebPanel embed title, and webhook-resolution relay endpoint string, all recovered from the build's runtime memory; the relay IP:port string is required in combination with another anchor rather than as a standalone trigger so the rule does not fire on the IP literal alone\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/evilsoul-engine-stealer-maas-detections/\"\n date = \"2026-07-03\"\n hash1 = \"299a2e7fa8a69c495ec19fecf55d93bb766addaa78e89a4e1ad78a9cea59b31c\"\n family = \"EvilSoul-Engine\"\n malware_type = \"Stealer + Interactive RAT (Socket.IO)\"\n campaign = \"EvilSoul-Engine-Stealer-MaaS-144.172.103.98\"\n id = \"3e7ee8e6-dfb5-5e12-a5c4-60d1db53ee2b\"\n strings:\n $argsfile = \"evilsoulblockkstarjkjaksghjhsjkahjskjak81929ijsahsjkj\" ascii wide fullword\n $panel = \"EvilSoul ~ (WebPanel)\" ascii wide\n $handle = \"@evilsoulstealer\" ascii wide\n $relay = \"198.1.195.210:3000/tralalero\" ascii wide\n $fallback_key = \"6D479A7E665F\" ascii wide fullword\n $update_cmd = \"updatesystem.cmd\" ascii wide fullword\n condition:\n filesize < 100MB and\n ($argsfile or 2 of ($panel, $handle, $relay, $fallback_key, $update_cmd))\n}",
"pattern_type": "yara",
"valid_from": "2026-07-03T00:00:00Z",
"labels": [
"detection-rule"
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--d4900748-7a4d-5bb6-b797-bcba720f22d9",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.176027Z",
"modified": "2026-10-11T04:24:14.427825Z",
"name": "Tool_xaitax_ChromElevator_EvilSoul_Fork",
"indicator_types": [
"malicious-activity"
],
"pattern": "/*\n Yara Rule Set\n Identifier: EvilSoul-Engine Supply Chain - xaitax ChromElevator ABE-Bypass Fork\n Author: The Hunters Ledger\n Source: https://the-hunters-ledger.com/\n License: CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\n*/\n\nrule Tool_xaitax_ChromElevator_EvilSoul_Fork {\n meta:\n description = \"Detects the @breakingupslow-forked build of the public xaitax Chrome-App-Bound-Encryption-Decryption (ChromElevator) tool pair, adopted by the EvilSoul-Engine operator as a runtime-fetched ABE-bypass supply-chain component; anchors on fork-specific attribution strings rather than the stock upstream tool's generic decryption logic\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/evilsoul-engine-stealer-maas-detections/\"\n date = \"2026-07-03\"\n modified = \"2026-10-11\"\n hash1 = \"dd97278cc64d0a8fbdb66f177367c29d2557dd445b306e922e9ad5660ea233e2\"\n hash2 = \"928f2ffa7fc84b74941fb714455d7bc14847b3af\"\n hash3 = \"a567eab759a390a00b4605ea7d161b26\"\n family = \"EvilSoul-Engine (xaitax ChromElevator fork)\"\n malware_type = \"HackTool (ABE Bypass)\"\n campaign = \"EvilSoul-Engine-Stealer-MaaS-144.172.103.98\"\n id = \"69fc6b2f-9058-5fb8-802a-5e0559c9d881\"\n strings:\n $banner = \" by @xaitax / @breakingupslow\" ascii wide\n $copyright = \"# Copyright (https://t.me/evilsoulstealer/)\" ascii wide\n condition:\n uint16(0) == 0x5A4D and\n filesize < 5MB and\n ($banner or $copyright)\n}",
"pattern_type": "yara",
"valid_from": "2026-07-03T00:00:00Z",
"labels": [
"detection-rule"
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--1fb61bec-c9d6-57fd-82b5-89c16137ed37",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.17611Z",
"modified": "2026-10-01T19:54:13.17611Z",
"name": "EvilSoul_Engine_SplitDomain_AntiGrep",
"indicator_types": [
"malicious-activity"
],
"pattern": "/*\n Yara Rule Set\n Identifier: EvilSoul-Engine Stealer-Builder MaaS - Kit-Wide Obfuscator Anchors\n Author: The Hunters Ledger\n Source: https://the-hunters-ledger.com/\n License: CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\n*/\n\nrule EvilSoul_Engine_SplitDomain_AntiGrep {\n meta:\n description = \"Detects EvilSoul-Engine's split-string anti-grep evasion of its own backend domain, where 'evilsoul.xyz' is constructed at runtime as the concatenation 'evilso' + 'ul.xyz' to defeat static string-grep hunting for the plaintext domain\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/evilsoul-engine-stealer-maas-detections/\"\n date = \"2026-07-03\"\n hash1 = \"763303b69ad589bef248b66d1db93d5e567d9d60f95511806289289ff42a548e\"\n family = \"EvilSoul-Engine\"\n malware_type = \"Stealer-Builder\"\n campaign = \"EvilSoul-Engine-Stealer-MaaS-144.172.103.98\"\n id = \"b840f5f4-2278-5334-9567-825b5491553c\"\n strings:\n $split1 = \"'evilso'+'ul.xyz'\" ascii wide\n $split2 = \"\\\"evilso\\\"+\\\"ul.xyz\\\"\" ascii wide\n $split3 = \"'evilso' + 'ul.xyz'\" ascii wide\n $split4 = \"\\\"evilso\\\" + \\\"ul.xyz\\\"\" ascii wide\n condition:\n filesize < 200MB and\n 1 of them\n}",
"pattern_type": "yara",
"valid_from": "2026-07-03T00:00:00Z",
"labels": [
"detection-rule"
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--b08cecb2-9f3d-5b76-9936-d78d4b75942d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.176187Z",
"modified": "2026-10-11T04:24:14.428174Z",
"name": "Browser Relaunched with Remote Debugging and Headless Flags by Non-Browser Parent",
"indicator_types": [
"malicious-activity"
],
"pattern": "title: Browser Relaunched with Remote Debugging and Headless Flags by Non-Browser Parent\nid: b788a75b-a966-47d5-b91b-5fb92b2e9571\nstatus: experimental\ndescription: >-\n Detects a Chrome, Edge or Brave browser process (by image name) launched with\n --remote-debugging-port, --headless, and --user-data-dir simultaneously by a\n parent process that is not one of those browsers, explorer.exe, or a node or\n python developer-automation binary. This flag combination is used by the\n EvilSoul-Engine stealer-builder MaaS and its bundled xaitax ChromElevator tool to\n relaunch the victim's own browser under CDP control and pull already-decrypted\n cookies via Network.getAllCookies, bypassing Chrome App-Bound Encryption without\n administrator rights.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/evilsoul-engine-stealer-maas-detections/\n - https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption\nauthor: The Hunters Ledger\ndate: '2026-07-03'\nmodified: '2026-10-11'\ntags:\n - attack.credential-access\n - attack.t1539\n - attack.collection\n - attack.t1185\n - detection.emerging-threats\nlogsource:\n category: process_creation\n product: windows\ndetection:\n selection_img:\n Image|endswith:\n - '\\chrome.exe'\n - '\\msedge.exe'\n - '\\brave.exe'\n selection_flags:\n CommandLine|contains|all:\n - '--remote-debugging-port'\n - '--headless'\n - '--user-data-dir'\n filter_main_browser_parent:\n ParentImage|endswith:\n - '\\chrome.exe'\n - '\\msedge.exe'\n - '\\brave.exe'\n - '\\explorer.exe'\n filter_dev_tooling_parent:\n ParentImage|endswith:\n - '\\node.exe'\n - '\\python.exe'\n - '\\pythonw.exe'\n condition: all of selection_* and not 1 of filter_*\nfalsepositives:\n - Legitimate browser automation frameworks (Selenium, Puppeteer, Playwright) launched from a known developer-tooling parent process\n - QA/CI pipelines that headlessly drive a browser for testing\nlevel: high",
"pattern_type": "sigma",
"valid_from": "2026-07-03T00:00:00Z",
"labels": [
"detection-rule"
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--f42b0e4c-6bb6-57dc-a650-a78be3601347",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.17626Z",
"modified": "2026-10-01T19:54:13.17626Z",
"name": "Python Process Opens LSASS Handle (ABE Decryptor Pattern)",
"indicator_types": [
"malicious-activity"
],
"pattern": "title: Python Process Opens LSASS Handle (ABE Decryptor Pattern)\nid: e2ccff6f-eec8-4a34-a78e-4ac4bf5d50f3\nstatus: experimental\ndescription: >-\n Detects a python.exe or pythonw.exe process that opens a handle to lsass.exe.\n This is the process-access signature of the EvilSoul-Engine stealer.js build's\n LSASS-impersonation App-Bound-Encryption decryptor, which is launched with a\n stdin-piped script (-u - flag, no script file argument) and enables\n SeDebugPrivilege to impersonate the lsass.exe token and decrypt Chrome's\n app-bound key via Windows CNG, leaving no decryptor script on disk. This rule\n matches on the LSASS handle-access behavior alone; it does not inspect the\n parent process's launch flags.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/evilsoul-engine-stealer-maas-detections/\nauthor: The Hunters Ledger\ndate: '2026-07-03'\ntags:\n - attack.credential-access\n - attack.t1003.001\n - attack.t1539\n - detection.emerging-threats\nlogsource:\n category: process_access\n product: windows\ndetection:\n selection_access:\n TargetImage|endswith: '\\lsass.exe'\n SourceImage|endswith:\n - '\\python.exe'\n - '\\pythonw.exe'\n condition: selection_access\nfalsepositives:\n - EDR or security-research tooling written in Python that legitimately inspects LSASS\n - Authorized credential-recovery or forensic tooling in incident-response workflows\nlevel: high",
"pattern_type": "sigma",
"valid_from": "2026-07-03T00:00:00Z",
"labels": [
"detection-rule"
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--84faab27-93c6-5e86-a657-8b522a23e976",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.176333Z",
"modified": "2026-10-11T04:24:14.428412Z",
"name": "Whole-Drive Windows Defender Exclusion Combined with Real-Time Monitoring Disable",
"indicator_types": [
"malicious-activity"
],
"pattern": "title: Whole-Drive Windows Defender Exclusion Combined with Real-Time Monitoring Disable\nid: fde077ad-0afc-4158-bff6-f4c80604d461\nstatus: experimental\ndescription: >-\n Detects PowerShell script block content that both adds a whole-drive\n (C:\\) Windows Defender exclusion path and disables real-time monitoring in\n the same execution context. This is the AV/Defender-suppression chain used\n by the EvilSoul-Engine 299a2e7f Socket.IO WebPanel build's DisableProtections\n function, which also disables the Windows Firewall before running noisy\n credential-theft operations.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/evilsoul-engine-stealer-maas-detections/\nauthor: The Hunters Ledger\ndate: '2026-07-03'\nmodified: '2026-10-11'\ntags:\n - attack.stealth\n - attack.t1685\n - attack.defense-impairment\n - detection.emerging-threats\nlogsource:\n category: ps_script\n product: windows\ndetection:\n selection_exclusion:\n ScriptBlockText|contains:\n - \"Add-MpPreference -ExclusionPath 'C:\\\\'\"\n - 'Add-MpPreference -ExclusionPath \"C:\\\\\"'\n selection_disable:\n ScriptBlockText|contains: 'Set-MpPreference -DisableRealtimeMonitoring $true'\n condition: selection_exclusion and selection_disable\nfalsepositives:\n - IT-administration deployment scripts that legitimately exclude C:\\ during imaging or migration (uncommon but not impossible)\nlevel: high",
"pattern_type": "sigma",
"valid_from": "2026-07-03T00:00:00Z",
"labels": [
"detection-rule"
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--1560c96b-28fd-5b01-927a-e1ba59ed568a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.176406Z",
"modified": "2026-10-11T05:07:57.529776Z",
"name": "Scheduled Task Created with Microsoft Corporation Author and Hidden Flag",
"indicator_types": [
"malicious-activity"
],
"pattern": "title: Scheduled Task Created with Microsoft Corporation Author and Hidden Flag\nid: c69291c1-70a6-4aa1-835f-bc26d4afcc2f\nstatus: experimental\ndescription: >-\n Detects creation of a new scheduled task whose Task XML Author field is set\n to the literal string \"Microsoft Corporation\" combined with the hidden\n flag enabled. This is the EvilSoul-Engine stealer.js build's persistence\n masquerade, designed to blend into Task Scheduler listings next to genuine\n Microsoft-authored tasks; legitimate Microsoft tasks are installed by the\n OS image or Windows Update rather than created at runtime. Tasks created by\n the SYSTEM account (SID S-1-5-18) are excluded, since that is how the OS and\n Windows Update install their own tasks; the report qualifies this as a hunt\n on tasks written by a non-system process.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/evilsoul-engine-stealer-maas-detections/\nauthor: The Hunters Ledger\ndate: '2026-07-03'\nmodified: '2026-10-11'\ntags:\n - attack.persistence\n - attack.execution\n - attack.privilege-escalation\n - attack.t1053.005\n - attack.stealth\n - attack.t1036.004\n - detection.emerging-threats\nlogsource:\n product: windows\n service: security\n definition: 'Requires Task Scheduler operational logging or Security auditing of Task Scheduler object creation (Event ID 4698) with TaskContent captured'\ndetection:\n selection:\n EventID: 4698\n TaskContent|contains|all:\n - 'Microsoft Corporation'\n - 'true'\n filter_main_system_creator:\n # sourced: report 5.5 qualifies the hunt as a task written by a non-system process; S-1-5-18 is the SYSTEM account SID\n SubjectUserSid: 'S-1-5-18'\n condition: selection and not filter_main_system_creator\nfalsepositives:\n - A non-SYSTEM installer or administrator script that registers a hidden task and copies the Microsoft Corporation author string into its own task XML (not measured)\n - A Microsoft component that registers its task from a non-SYSTEM context at runtime (not measured)\nlevel: high",
"pattern_type": "sigma",
"valid_from": "2026-07-03T00:00:00Z",
"labels": [
"detection-rule"
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--8fc5d48b-d42b-5667-bed2-a11d9fba74de",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.176478Z",
"modified": "2026-10-11T04:24:14.42864Z",
"name": "ChromElevator ABE-Bypass Tool Dropped to TEMP Executor Directory",
"indicator_types": [
"malicious-activity"
],
"pattern": "title: ChromElevator ABE-Bypass Tool Dropped to TEMP Executor Directory\nid: 2d54e3fa-a90b-4709-9521-b7a4ab95e76a\nstatus: experimental\ndescription: >-\n Detects file creation of chromelevator.exe or chrome_decrypt.dll under a\n TEMP\\executor\\ path, matching the staging location used by the EvilSoul-Engine\n 299a2e7f Socket.IO WebPanel build when it downloads the xaitax\n Chrome-App-Bound-Encryption-Decryption tool pair from a GitHub supply-chain\n mirror at runtime.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/evilsoul-engine-stealer-maas-detections/\n - https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption\nauthor: The Hunters Ledger\ndate: '2026-07-03'\nmodified: '2026-10-11'\ntags:\n - attack.command-and-control\n - attack.t1105\n - attack.credential-access\n - attack.t1555.003\n - detection.emerging-threats\nlogsource:\n category: file_event\n product: windows\ndetection:\n selection:\n TargetFilename|contains: '\\Temp\\executor\\'\n TargetFilename|endswith:\n - '\\chromelevator.exe'\n - '\\chrome_decrypt.dll'\n condition: selection\nfalsepositives:\n - Extremely unlikely — these are operator-chosen filenames with no legitimate software collision\nlevel: medium",
"pattern_type": "sigma",
"valid_from": "2026-07-03T00:00:00Z",
"labels": [
"detection-rule"
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--f295a45f-a4cb-55dd-855a-4a0608f2fb04",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-11T04:24:14.428749Z",
"modified": "2026-10-11T04:24:14.428749Z",
"name": "EvilSoul-Engine Watchdog Persistence Files Created in User TEMP or the Startup Folder",
"indicator_types": [
"malicious-activity"
],
"pattern": "title: EvilSoul-Engine Watchdog Persistence Files Created in User TEMP or the Startup Folder\nid: 5f925688-77fd-410a-9c8a-83ca801a5013\nstatus: experimental\ndescription: >-\n Detects file creation of the specific watchdog and persistence-chain\n filenames used by the EvilSoul-Engine 299a2e7f build's redundant\n persistence-of-persistence mechanism: updatesystem.cmd and watcher.vbs\n under the user's Temp folder, and update.bat in the user's Startup\n folder. The report says these files are subsequently attribute-flagged\n hidden to survive casual folder inspection.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/evilsoul-engine-stealer-maas-detections/\nauthor: The Hunters Ledger\ndate: '2026-07-03'\nmodified: '2026-10-11'\ntags:\n - attack.stealth\n - attack.t1564.001\n - attack.persistence\n - attack.execution\n - attack.privilege-escalation\n - attack.t1053.005\n - detection.emerging-threats\nlogsource:\n category: file_event\n product: windows\ndetection:\n selection_temp:\n TargetFilename|contains: '\\AppData\\Local\\Temp\\'\n TargetFilename|endswith:\n - '\\updatesystem.cmd'\n - '\\watcher.vbs'\n selection_startup:\n TargetFilename|contains: '\\Start Menu\\Programs\\Startup\\'\n TargetFilename|endswith: '\\update.bat'\n condition: 1 of selection_*\nfalsepositives:\n - Legitimate software update scripts that happen to share these generic filenames in the user Temp or Startup folders\n - Custom internal IT automation using similarly named watchdog scripts\nlevel: medium",
"pattern_type": "sigma",
"valid_from": "2026-07-03T00:00:00Z",
"labels": [
"detection-rule"
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--34511101-f43a-5cdd-bc3b-c08b02813517",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.176621Z",
"modified": "2026-10-01T19:54:13.176621Z",
"name": "THL DETECT EvilSoul-Engine Webhook-Resolution Relay POST /tralalero (299a2e7f License-Gated C2)",
"indicator_types": [
"malicious-activity"
],
"pattern": "alert http $HOME_NET any -> any any (msg:\"THL DETECT EvilSoul-Engine Webhook-Resolution Relay POST /tralalero (299a2e7f License-Gated C2)\"; flow:established,to_server; http.method; content:\"POST\"; http.uri; content:\"/tralalero\"; nocase; threshold:type limit,track by_src,count 1,seconds 3600; reference:url,the-hunters-ledger.com/hunting-detections/evilsoul-engine-stealer-maas-detections/; classtype:trojan-activity; sid:1000002; rev:3; metadata:author The_Hunters_Ledger, date 2026-07-03;)",
"pattern_type": "suricata",
"valid_from": "2026-07-03T00:00:00Z",
"labels": [
"detection-rule"
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.176701Z",
"modified": "2026-10-01T19:54:13.176701Z",
"name": "KAIDO (Quasar RAT fork)",
"is_family": true,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.176778Z",
"modified": "2026-10-01T19:54:13.176778Z",
"name": "EvilSoul-Engine (Node/Electron stealer-builder)",
"is_family": true,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.177134Z",
"modified": "2026-10-01T19:54:13.177134Z",
"name": "KAIDO Quasar RAT (02294476)",
"description": "KAIDO Quasar RAT, low-detection sibling (PART A)",
"malware_types": [
"backdoor"
],
"is_family": false,
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--51bc88ac-1909-5cdd-a97b-a004a5a69f12",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.177235Z",
"modified": "2026-10-01T19:54:13.177235Z",
"name": "static/tpkg.exe",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.177317Z",
"modified": "2026-10-01T19:54:13.177317Z",
"name": "EvilSoul builder_index.js",
"description": "EvilSoul builder_index.js (Builder API) (PART B)",
"malware_types": [
"backdoor"
],
"is_family": false,
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.177401Z",
"modified": "2026-10-01T19:54:13.177401Z",
"name": "EvilSoul Socket.IO WebPanel RAT build",
"description": "EvilSoul Socket.IO WebPanel RAT build (81.9 MB pkg-Node), C2 evilsoul.cc (PART B)",
"malware_types": [
"backdoor"
],
"is_family": false,
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--4b957a0e-efed-5e07-9309-2a437bad6185",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.177478Z",
"modified": "2026-10-01T19:54:13.177478Z",
"name": "Tinarox app.asar",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.177548Z",
"modified": "2026-10-01T19:54:13.177548Z",
"name": "EvilSoul index.js orchestrator",
"description": "EvilSoul index.js orchestrator (forks 4 services) (PART B)",
"malware_types": [
"backdoor"
],
"is_family": false,
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.177625Z",
"modified": "2026-10-01T19:54:13.177625Z",
"name": "KAIDO Quasar RAT (385d20ca)",
"description": "KAIDO Quasar RAT, live-C2 sibling, c2.kaidoo.com.br:443 (PART A)",
"malware_types": [
"backdoor"
],
"is_family": false,
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--d53e47ff-7191-50dc-bee2-feb1cb30cbe6",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.177701Z",
"modified": "2026-10-01T19:54:13.177701Z",
"name": "evilsoul.cc node.exe build (68f438ac)",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.177769Z",
"modified": "2026-10-01T19:54:13.177769Z",
"name": "Maploot.msi EvilSoul Electron stealer",
"description": "Maploot.msi EvilSoul Electron stealer (172 MB) (PART B)",
"malware_types": [
"backdoor"
],
"is_family": false,
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--afcfd12c-3ff5-59e6-90f0-2f739547ca91",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.177853Z",
"modified": "2026-10-01T19:54:13.177853Z",
"name": "static/sfix.exe",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--e675fa5c-f90a-5555-b249-7e1a94c1fc93",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.177921Z",
"modified": "2026-10-01T19:54:13.177921Z",
"name": "evilsoul.cc node.exe build (7eb13438)",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--c760731b-beb1-542e-9ade-7a7bb67b2434",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.177988Z",
"modified": "2026-10-01T19:54:13.177988Z",
"name": "Sibling EvilSoul node.exe build (93418568)",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.178054Z",
"modified": "2026-10-01T19:54:13.178054Z",
"name": "EvilSoul obfuscator.js",
"description": "EvilSoul obfuscator.js (js-confuser+AES-GCM+XOR packer) (PART B)",
"malware_types": [
"backdoor"
],
"is_family": false,
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--f74c71fe-d8db-5a4f-a72e-64ed43a00e9a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.178131Z",
"modified": "2026-10-01T19:54:13.178131Z",
"name": "TinaroxGamesFree.exe",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.178198Z",
"modified": "2026-10-01T19:54:13.178198Z",
"name": "EvilSoul stealer.js",
"description": "EvilSoul stealer.js (0xK41) payload source (PART B)",
"malware_types": [
"backdoor"
],
"is_family": false,
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--cbe66483-3a8f-51d7-a3d1-5ea4d2b73ae0",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.178277Z",
"modified": "2026-10-01T19:54:13.178277Z",
"name": "Sibling EvilSoul node.exe build (bfd3fe4f)",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.178346Z",
"modified": "2026-10-01T19:54:13.178346Z",
"name": "KAIDO Quasar RAT (c7542e82)",
"description": "KAIDO Quasar RAT, tag 'breach', C2 kaidoo.com.br:4782 (PART A)",
"malware_types": [
"backdoor"
],
"is_family": false,
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--dff3e5e0-bdac-52f1-a41f-dd8e43084704",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.178422Z",
"modified": "2026-10-01T19:54:13.178422Z",
"name": "static/sv2.exe",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--75f1c114-02ff-552e-94e0-55c28d4f2cb9",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.178487Z",
"modified": "2026-10-01T19:54:13.178487Z",
"name": "static/snew.exe",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.178552Z",
"modified": "2026-10-01T19:54:13.178552Z",
"name": "EvilSoul panel.exe WebPanel",
"description": "EvilSoul panel.exe WebPanel (pkg-Node) (PART B)",
"malware_types": [
"backdoor"
],
"is_family": false,
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--d9239561-7874-5d1b-9cda-e6835dc7d12d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.178629Z",
"modified": "2026-10-01T19:54:13.178629Z",
"name": "chromelevator.exe",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "tool",
"spec_version": "2.1",
"id": "tool--5fd6d807-0015-57a2-bf64-d076201f281e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.178693Z",
"modified": "2026-10-01T19:54:13.178693Z",
"name": "chrome_decrypt.dll",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "malware",
"spec_version": "2.1",
"id": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.178758Z",
"modified": "2026-10-01T19:54:13.178758Z",
"name": "Tinarox.msi EvilSoul Electron stealer",
"description": "Tinarox.msi EvilSoul Electron stealer (Maploot twin) (PART B)",
"malware_types": [
"backdoor"
],
"is_family": false,
"confidence": 95,
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.178836Z",
"modified": "2026-10-01T19:54:13.178836Z",
"name": "Remote Access Software",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1219",
"external_id": "T1219"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.178941Z",
"modified": "2026-10-01T19:54:13.178941Z",
"name": "Mark-of-the-Web Bypass",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1553/005",
"external_id": "T1553.005"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.179025Z",
"modified": "2026-10-01T19:54:13.179025Z",
"name": "Execution Guardrails",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1480",
"external_id": "T1480"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.179104Z",
"modified": "2026-10-01T19:54:13.179104Z",
"name": "Non-Application Layer Protocol",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1095",
"external_id": "T1095"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.179183Z",
"modified": "2026-10-01T19:54:13.179183Z",
"name": "Screen Capture",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1113",
"external_id": "T1113"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.179259Z",
"modified": "2026-10-01T19:54:13.179259Z",
"name": "Audio Capture",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1123",
"external_id": "T1123"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.179525Z",
"modified": "2026-10-01T19:54:13.179525Z",
"name": "Video Capture",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1125",
"external_id": "T1125"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.179617Z",
"modified": "2026-10-01T19:54:13.179617Z",
"name": "Keylogging",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1056/001",
"external_id": "T1056.001"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.179695Z",
"modified": "2026-10-01T19:54:13.179695Z",
"name": "Credentials from Web Browsers",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1555/003",
"external_id": "T1555.003"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.17977Z",
"modified": "2026-10-01T19:54:13.17977Z",
"name": "Steal Web Session Cookie",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1539",
"external_id": "T1539"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.179851Z",
"modified": "2026-10-01T19:54:13.179851Z",
"name": "Steal Application Access Token",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1528",
"external_id": "T1528"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.179925Z",
"modified": "2026-10-01T19:54:13.179925Z",
"name": "Disable or Modify Tools",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1685",
"external_id": "T1685"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.180Z",
"modified": "2026-10-01T19:54:13.180Z",
"name": "Virtualization/Sandbox Evasion",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1497",
"external_id": "T1497"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.180078Z",
"modified": "2026-10-01T19:54:13.180078Z",
"name": "Process Hollowing",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1055/012",
"external_id": "T1055.012"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.180154Z",
"modified": "2026-10-01T19:54:13.180154Z",
"name": "Registry Run Keys / Startup Folder",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1547/001",
"external_id": "T1547.001"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.180232Z",
"modified": "2026-10-01T19:54:13.180232Z",
"name": "Scheduled Task",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1053/005",
"external_id": "T1053.005"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.180308Z",
"modified": "2026-10-01T19:54:13.180308Z",
"name": "Masquerade Task or Service",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1036/004",
"external_id": "T1036.004"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.180384Z",
"modified": "2026-10-01T19:54:13.180384Z",
"name": "Exfiltration to Cloud Storage",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1567/002",
"external_id": "T1567.002"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.180461Z",
"modified": "2026-10-01T19:54:13.180461Z",
"name": "Exfiltration Over C2 Channel",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1041",
"external_id": "T1041"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.180537Z",
"modified": "2026-10-01T19:54:13.180537Z",
"name": "Obtain Capabilities: Tool",
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/techniques/T1588/002",
"external_id": "T1588.002"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "infrastructure",
"spec_version": "2.1",
"id": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.180619Z",
"modified": "2026-10-01T19:54:13.180619Z",
"name": "evilsoul-engine-stealer-maas-144-172-103-98 infrastructure",
"infrastructure_types": [
"command-and-control",
"hosting"
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--edf097e9-a38a-5173-92f0-e87855a11e0f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18123Z",
"modified": "2026-10-01T19:54:13.18123Z",
"relationship_type": "indicates",
"source_ref": "indicator--46b7e506-045a-5849-bf54-0e519b3e0f41",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8d1ae925-f80c-51bb-af99-9f5f92449192",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18131Z",
"modified": "2026-10-01T19:54:13.18131Z",
"relationship_type": "indicates",
"source_ref": "indicator--bb14b624-d5e8-5f37-bd0e-c6226f7c9cf4",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f7bb6b22-9793-5cfa-b8ea-4fc16a05b156",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.181378Z",
"modified": "2026-10-01T19:54:13.181378Z",
"relationship_type": "indicates",
"source_ref": "indicator--98fc5b94-ab86-5d56-8310-f18fce62bda3",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ace99f94-d61f-51af-8daf-ae932a5dc4f6",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.181441Z",
"modified": "2026-10-01T19:54:13.181441Z",
"relationship_type": "indicates",
"source_ref": "indicator--8f63ccdb-688d-54d9-8abd-bc25cf65d8fd",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c9d4cfe0-397d-55a4-864a-a4e654fea2f5",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.181504Z",
"modified": "2026-10-01T19:54:13.181504Z",
"relationship_type": "indicates",
"source_ref": "indicator--956b16bd-2868-5b75-a188-d4aa82f16bd8",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--845f3f29-69f6-5447-a5b3-e61fc58374b8",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.181565Z",
"modified": "2026-10-01T19:54:13.181565Z",
"relationship_type": "indicates",
"source_ref": "indicator--fbbe1eb6-7aa4-50fb-8a5d-6ddf9ca8196f",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--024c97f6-bfd5-58ba-bdfa-8aea41c3408f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.181626Z",
"modified": "2026-10-01T19:54:13.181626Z",
"relationship_type": "indicates",
"source_ref": "indicator--e7cc84a5-aa27-5a54-a7cf-38dc1dfa5d40",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e8e551c0-e729-50d3-92f7-f7d5a6355fda",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.181686Z",
"modified": "2026-10-01T19:54:13.181686Z",
"relationship_type": "indicates",
"source_ref": "indicator--06a03fd5-b55a-56cd-b60f-8355d15ecbd5",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2a92e71a-1b62-5349-8660-2d8398209a05",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.181747Z",
"modified": "2026-10-01T19:54:13.181747Z",
"relationship_type": "indicates",
"source_ref": "indicator--314ef298-f608-5c92-8c57-fe5a93a11da3",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--11332e36-2f50-5c8e-91fd-fe4dc2df2b12",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.181813Z",
"modified": "2026-10-01T19:54:13.181813Z",
"relationship_type": "indicates",
"source_ref": "indicator--5ba0936a-572c-5afb-8f14-098cf4458169",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--92961320-9fee-58f2-92b2-bd3ed138ac92",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.181875Z",
"modified": "2026-10-01T19:54:13.181875Z",
"relationship_type": "indicates",
"source_ref": "indicator--603fbed9-f0f3-5e2e-895a-e67ecffa041d",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f7959d62-b5be-5e58-8dca-93040e1eb745",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.181935Z",
"modified": "2026-10-01T19:54:13.181935Z",
"relationship_type": "indicates",
"source_ref": "indicator--61e25531-4098-560f-94c8-fc8348e38fed",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--03266b40-706b-56b9-bbe4-d0ecd6f86e95",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.181996Z",
"modified": "2026-10-01T19:54:13.181996Z",
"relationship_type": "indicates",
"source_ref": "indicator--d5ab16b9-949e-5aae-b1c3-e66c32b648b4",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--af90f3a4-391e-52d5-992d-24be207347d5",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.182057Z",
"modified": "2026-10-01T19:54:13.182057Z",
"relationship_type": "indicates",
"source_ref": "indicator--1087c29b-b9b4-5cc5-a14f-f05641aaab07",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--5af0d544-ff47-5631-900f-e0d2aca7bd4c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.182118Z",
"modified": "2026-10-01T19:54:13.182118Z",
"relationship_type": "indicates",
"source_ref": "indicator--697def34-d9ed-5244-8717-5c3e2140b1aa",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--5062d5cb-e20c-56ef-a1f6-311edb837876",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.182179Z",
"modified": "2026-10-01T19:54:13.182179Z",
"relationship_type": "indicates",
"source_ref": "indicator--125571e3-db6a-5a86-8b53-13422a34b715",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d7b15d3d-eb78-5018-b509-447996fac78c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18224Z",
"modified": "2026-10-01T19:54:13.18224Z",
"relationship_type": "indicates",
"source_ref": "indicator--b0aba044-09e1-5f37-81f9-0d3102877d55",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a93d5c17-5578-5aac-b635-d3d40e6325d0",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.1823Z",
"modified": "2026-10-01T19:54:13.1823Z",
"relationship_type": "indicates",
"source_ref": "indicator--b7fa97ff-0977-5334-8f3d-1d290e5a141d",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2ee23eb4-6704-5ecb-9de3-62bf1291955c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18236Z",
"modified": "2026-10-01T19:54:13.18236Z",
"relationship_type": "indicates",
"source_ref": "indicator--f728748b-968a-5d9d-998e-e1967686ca2e",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0900978c-454a-571a-9e2c-6be4b92e74fe",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.182419Z",
"modified": "2026-10-01T19:54:13.182419Z",
"relationship_type": "indicates",
"source_ref": "indicator--64f68ffd-5598-5e75-a8e6-108679f2ff53",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e8ae4caf-a32a-5455-93ad-4da314a4410b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.182478Z",
"modified": "2026-10-01T19:54:13.182478Z",
"relationship_type": "indicates",
"source_ref": "indicator--fa541fcc-cf72-5c01-a6a3-2955fecb96b8",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--049684da-db63-5d92-b268-a47793781deb",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.182537Z",
"modified": "2026-10-01T19:54:13.182537Z",
"relationship_type": "indicates",
"source_ref": "indicator--6907b9eb-f4b5-5b94-83a6-6543590c8b03",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2038082c-bac5-58dc-bc62-eeed24fd4494",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.182596Z",
"modified": "2026-10-01T19:54:13.182596Z",
"relationship_type": "indicates",
"source_ref": "indicator--699fd09a-14e8-5b34-9a19-642042da338b",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a44f8e3c-49ed-5d38-8c66-8f4194168e70",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.182655Z",
"modified": "2026-10-01T19:54:13.182655Z",
"relationship_type": "indicates",
"source_ref": "indicator--d487abaa-2f25-5cb8-99d3-61c096417f12",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f853f6fa-e0e6-5057-af10-9874fa7e1308",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.182715Z",
"modified": "2026-10-01T19:54:13.182715Z",
"relationship_type": "indicates",
"source_ref": "indicator--5607a0be-1a3e-57da-894f-cf291eed3b54",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--42147ddc-cc51-5b83-acee-c065d4890ec3",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.182775Z",
"modified": "2026-10-01T19:54:13.182775Z",
"relationship_type": "indicates",
"source_ref": "indicator--cfb90865-9bc0-53ac-ab5e-20b3e1331a41",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--134f285f-d36a-5f62-989b-75b838eb851e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.182838Z",
"modified": "2026-10-01T19:54:13.182838Z",
"relationship_type": "indicates",
"source_ref": "indicator--dd61191b-3130-5b3f-9dab-5eeb93e23d04",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--aa20b24b-036b-567b-b66e-c9a65150c03f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.182898Z",
"modified": "2026-10-01T19:54:13.182898Z",
"relationship_type": "indicates",
"source_ref": "indicator--595e7e26-9368-5b2b-8adf-87b418b18f01",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--895753e9-c795-5bf8-a5fb-429c2967113f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.182958Z",
"modified": "2026-10-01T19:54:13.182958Z",
"relationship_type": "indicates",
"source_ref": "indicator--56e648c4-f76f-5b8f-ab45-313fd3b3457f",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f6f33dca-6bd6-5706-9f26-fef59d3a14d2",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183017Z",
"modified": "2026-10-01T19:54:13.183017Z",
"relationship_type": "indicates",
"source_ref": "indicator--0e4ece88-fc55-526f-9584-72c0fdad8fbe",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9b6c73aa-8405-5286-904b-a04612f86a6a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183076Z",
"modified": "2026-10-01T19:54:13.183076Z",
"relationship_type": "indicates",
"source_ref": "indicator--be28ff7e-3d67-52b7-9f08-d4e4132d19be",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2fc6c557-ab2a-5cc8-8920-2199fb0764dd",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183135Z",
"modified": "2026-10-01T19:54:13.183135Z",
"relationship_type": "indicates",
"source_ref": "indicator--f6a4ebb0-f9e8-5832-8f9f-cb0159f65675",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--5e553e30-fbc9-5f07-b4ea-f5edcd2c33fe",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183195Z",
"modified": "2026-10-01T19:54:13.183195Z",
"relationship_type": "indicates",
"source_ref": "indicator--62129313-651a-540e-92c8-cf60ed76ced6",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--94e28fac-3f99-5589-9f59-897aeaf2ebf9",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183255Z",
"modified": "2026-10-01T19:54:13.183255Z",
"relationship_type": "indicates",
"source_ref": "indicator--5d491a50-d8d8-545c-a4e5-bfa2eb5b66f3",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--729f2b53-012b-56f2-8509-0119659393af",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183315Z",
"modified": "2026-10-01T19:54:13.183315Z",
"relationship_type": "indicates",
"source_ref": "indicator--5c601fee-ef41-52ff-b6e2-d26bb274d903",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3cf457b7-f3c7-5804-a251-f32ca0f6e469",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183375Z",
"modified": "2026-10-01T19:54:13.183375Z",
"relationship_type": "indicates",
"source_ref": "indicator--8eb1f406-6c2e-5e24-9e82-0f764aa3a4af",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6188171e-eac6-5cc5-8583-fcc6488c8622",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183434Z",
"modified": "2026-10-01T19:54:13.183434Z",
"relationship_type": "indicates",
"source_ref": "indicator--d9213b19-02af-5913-831c-73018b12b053",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--020bbcb6-2064-580a-96d1-3b211926caf6",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183494Z",
"modified": "2026-10-01T19:54:13.183494Z",
"relationship_type": "indicates",
"source_ref": "indicator--d4900748-7a4d-5bb6-b797-bcba720f22d9",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--acbb818e-2b25-5fb8-8616-932b80c4b73d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183554Z",
"modified": "2026-10-01T19:54:13.183554Z",
"relationship_type": "indicates",
"source_ref": "indicator--1fb61bec-c9d6-57fd-82b5-89c16137ed37",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9446132a-3788-5144-9288-5f63846190e3",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183614Z",
"modified": "2026-10-01T19:54:13.183614Z",
"relationship_type": "indicates",
"source_ref": "indicator--b08cecb2-9f3d-5b76-9936-d78d4b75942d",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f9e3f51f-0b0e-5f26-add0-00986a5e1808",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183673Z",
"modified": "2026-10-01T19:54:13.183673Z",
"relationship_type": "indicates",
"source_ref": "indicator--f42b0e4c-6bb6-57dc-a650-a78be3601347",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b3b7e851-e537-5138-83c7-d4c69b048c3e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183733Z",
"modified": "2026-10-01T19:54:13.183733Z",
"relationship_type": "indicates",
"source_ref": "indicator--84faab27-93c6-5e86-a657-8b522a23e976",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7c90ec33-5126-5015-902a-472859328307",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183791Z",
"modified": "2026-10-01T19:54:13.183791Z",
"relationship_type": "indicates",
"source_ref": "indicator--1560c96b-28fd-5b01-927a-e1ba59ed568a",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--becbdacf-1201-525b-8d70-81ae58b5ef76",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183855Z",
"modified": "2026-10-01T19:54:13.183855Z",
"relationship_type": "indicates",
"source_ref": "indicator--8fc5d48b-d42b-5667-bed2-a11d9fba74de",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7267005d-1795-53d3-a77d-4835e51e7d8e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-11T04:24:14.443233Z",
"modified": "2026-10-11T04:24:14.443233Z",
"relationship_type": "indicates",
"source_ref": "indicator--f295a45f-a4cb-55dd-855a-4a0608f2fb04",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f7eb2953-515c-5385-8841-82055055d0b6",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.183973Z",
"modified": "2026-10-01T19:54:13.183973Z",
"relationship_type": "indicates",
"source_ref": "indicator--34511101-f43a-5cdd-bc3b-c08b02813517",
"target_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--06bb6bea-bc3b-5049-9d63-a59af68b8523",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.184054Z",
"modified": "2026-10-01T19:54:13.184054Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c573fe45-8daa-5ff3-9688-9cdd5e8c2308",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18414Z",
"modified": "2026-10-01T19:54:13.18414Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4b3d8a6d-de03-556e-b3e5-0c55624fb41f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.184203Z",
"modified": "2026-10-01T19:54:13.184203Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--92e4919c-ce8e-5572-b3e8-221ca46dce37",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.184263Z",
"modified": "2026-10-01T19:54:13.184263Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9529d192-6f71-5990-84dc-85b81a6eb3f5",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.184323Z",
"modified": "2026-10-01T19:54:13.184323Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f1bf3c2d-03dd-53bb-ae87-3e00b4036b6b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.184382Z",
"modified": "2026-10-01T19:54:13.184382Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--aa8cca20-7807-5599-9943-4ff1ea531d96",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18444Z",
"modified": "2026-10-01T19:54:13.18444Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f7d8fb36-0d65-5b81-9a50-4e56a66ef79c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.1845Z",
"modified": "2026-10-01T19:54:13.1845Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--47158991-70f7-5425-91a4-9fd298bc587e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.184558Z",
"modified": "2026-10-01T19:54:13.184558Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f84b9818-f3a5-5b25-ac26-26b1817df399",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.184617Z",
"modified": "2026-10-01T19:54:13.184617Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--537b36e2-adba-504d-b9c8-7a4adb1ef320",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.184676Z",
"modified": "2026-10-01T19:54:13.184676Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b39c17fc-b44e-556e-9042-74bbc0937817",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.184735Z",
"modified": "2026-10-01T19:54:13.184735Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--315cb67e-c412-5f0a-b971-0be74c03e50c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.184793Z",
"modified": "2026-10-01T19:54:13.184793Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7903a1bb-9c76-512c-b259-a0da8acb0909",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.184856Z",
"modified": "2026-10-01T19:54:13.184856Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--10c09d94-2f0a-5bf9-825a-b9a4abf42614",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.184916Z",
"modified": "2026-10-01T19:54:13.184916Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4cf9902f-4159-5fd4-9b56-c436448585d3",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.184976Z",
"modified": "2026-10-01T19:54:13.184976Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8b32a194-b3ec-54f6-8974-08793b6ec22b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.185035Z",
"modified": "2026-10-01T19:54:13.185035Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a06795fc-3876-5d5a-bdd3-a62836326589",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.185094Z",
"modified": "2026-10-01T19:54:13.185094Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a9e9d845-e050-510d-ba3b-77fdfabf92ad",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.185153Z",
"modified": "2026-10-01T19:54:13.185153Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c6821465-fa79-506e-801c-18207b157015",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.185211Z",
"modified": "2026-10-01T19:54:13.185211Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--187dd435-7251-5d96-84a1-e7352dcef23b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18527Z",
"modified": "2026-10-01T19:54:13.18527Z",
"relationship_type": "uses",
"source_ref": "malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"target_ref": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8574b44c-60c5-5eb1-91a0-a155b68f80ec",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.185329Z",
"modified": "2026-10-01T19:54:13.185329Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6a6815a5-940e-5cdf-aa5a-137c4dba1b1d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.185387Z",
"modified": "2026-10-01T19:54:13.185387Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--69d40ddc-fc5f-5ee8-ba09-1a71c2e13b22",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.185445Z",
"modified": "2026-10-01T19:54:13.185445Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--47f026d1-109a-5367-bf22-7d9eed19ac78",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.185504Z",
"modified": "2026-10-01T19:54:13.185504Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--904a7634-dd16-5526-b3b6-c3efd1bcf3ed",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.185562Z",
"modified": "2026-10-01T19:54:13.185562Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8c0562f6-a8eb-5093-b8a2-3188db7cdc09",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18562Z",
"modified": "2026-10-01T19:54:13.18562Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c5bc85e1-f65b-5451-b36e-508905c49af8",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18568Z",
"modified": "2026-10-01T19:54:13.18568Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--55eed95e-693b-598d-8e3c-ad7c51baa30d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.185739Z",
"modified": "2026-10-01T19:54:13.185739Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--08cfbc15-aa09-58f6-99db-ec83d6b63359",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.1858Z",
"modified": "2026-10-01T19:54:13.1858Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--170bb3a9-d577-53c8-b464-bd04d81c5db3",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.185861Z",
"modified": "2026-10-01T19:54:13.185861Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--77ecce8b-6334-56ba-b543-cbbb59648792",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18592Z",
"modified": "2026-10-01T19:54:13.18592Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--db57c9ca-06b9-5c93-8e55-2a5e0d267b4e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.185979Z",
"modified": "2026-10-01T19:54:13.185979Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7337bc5d-a721-5dfb-a23a-17e5e94faa6f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186038Z",
"modified": "2026-10-01T19:54:13.186038Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0a69aea5-e808-5630-a903-da5eb20c81c2",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186097Z",
"modified": "2026-10-01T19:54:13.186097Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b18cc6d2-3c8c-5583-b237-b2a6f8dcefb3",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186156Z",
"modified": "2026-10-01T19:54:13.186156Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b61a6042-4900-5a58-b500-1098dface44c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186214Z",
"modified": "2026-10-01T19:54:13.186214Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--800e60d9-8a3c-5ba3-a81d-823e6e30b8c4",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186274Z",
"modified": "2026-10-01T19:54:13.186274Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e03e8d7d-e4b6-51f2-a06e-e83789b30749",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186332Z",
"modified": "2026-10-01T19:54:13.186332Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3c11d08e-59e9-576c-b990-11ea124cac57",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186392Z",
"modified": "2026-10-01T19:54:13.186392Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--44e0e69d-463c-5cca-bcb2-f68929f05b33",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18645Z",
"modified": "2026-10-01T19:54:13.18645Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ca6f5732-056d-5a6e-99b4-81f1bfe2734e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18651Z",
"modified": "2026-10-01T19:54:13.18651Z",
"relationship_type": "uses",
"source_ref": "malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"target_ref": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--78d19635-3ac5-5da0-888b-4de403b76bc9",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186569Z",
"modified": "2026-10-01T19:54:13.186569Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2208ce4a-9b5e-5f60-91ae-455daf19459f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186628Z",
"modified": "2026-10-01T19:54:13.186628Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--66dd06e8-0849-5a9d-b969-07c564ee3ddd",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186687Z",
"modified": "2026-10-01T19:54:13.186687Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3586b75b-404d-53f2-8f8e-1caca9622021",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186745Z",
"modified": "2026-10-01T19:54:13.186745Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c8eb3e08-9dad-5b9a-bbba-e0570156980f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186808Z",
"modified": "2026-10-01T19:54:13.186808Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--5bc6aac5-a343-572d-aad1-da14897dce70",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186868Z",
"modified": "2026-10-01T19:54:13.186868Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3047f0ae-c9af-5ebc-9ddb-437b02990043",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186928Z",
"modified": "2026-10-01T19:54:13.186928Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f270fa41-eff1-5102-b909-f59ef8094b9f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.186987Z",
"modified": "2026-10-01T19:54:13.186987Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d5ced1a1-6d8d-5cbe-88a7-2c5428ee81db",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187046Z",
"modified": "2026-10-01T19:54:13.187046Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--388fbd9c-3f4d-5ba1-91d8-fcbffb620702",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187106Z",
"modified": "2026-10-01T19:54:13.187106Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--17d0cc6c-af0c-5466-915d-5608df8f1aff",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187165Z",
"modified": "2026-10-01T19:54:13.187165Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--cd9926df-6352-57a9-81fc-0df785184aa0",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187224Z",
"modified": "2026-10-01T19:54:13.187224Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d52f9b25-9778-5c63-9b9c-cd02a6c2947a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187281Z",
"modified": "2026-10-01T19:54:13.187281Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4fc300e4-a068-5738-9cc4-55a62a091f75",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18734Z",
"modified": "2026-10-01T19:54:13.18734Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ba2f48e5-5bb7-53f5-8b39-6df864021aed",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187399Z",
"modified": "2026-10-01T19:54:13.187399Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b710854f-7b8a-5a71-9683-715f562fefab",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187458Z",
"modified": "2026-10-01T19:54:13.187458Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2e121456-75ad-50e5-8343-3655b644ec69",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187517Z",
"modified": "2026-10-01T19:54:13.187517Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--39c25b54-dac1-5ed2-a21d-3445d9da21e0",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187575Z",
"modified": "2026-10-01T19:54:13.187575Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6244126f-0a8d-57bf-a237-f849b931484f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187634Z",
"modified": "2026-10-01T19:54:13.187634Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3b317bd8-6f0e-5fe0-a9ce-b3c4426b57cf",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187693Z",
"modified": "2026-10-01T19:54:13.187693Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3dffa70a-29c2-504b-a551-dc48e1d81e9a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187751Z",
"modified": "2026-10-01T19:54:13.187751Z",
"relationship_type": "uses",
"source_ref": "malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"target_ref": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6d44da69-0fd8-5525-9685-09f12d37dafa",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187814Z",
"modified": "2026-10-01T19:54:13.187814Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--96481ad2-1b1b-5118-b717-b38ac157f1a9",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187874Z",
"modified": "2026-10-01T19:54:13.187874Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a842aec4-dfb3-5289-a5fe-13fe9d9a0ebb",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187933Z",
"modified": "2026-10-01T19:54:13.187933Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9661d772-de05-5c51-af02-409c590d70cc",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.187992Z",
"modified": "2026-10-01T19:54:13.187992Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--22c4cc38-4069-5ad7-bea9-bb2bc4151533",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18805Z",
"modified": "2026-10-01T19:54:13.18805Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6d4be1ac-5bd1-58e7-9341-a0ef82ca8c7d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188109Z",
"modified": "2026-10-01T19:54:13.188109Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--bb733e44-545d-5322-9652-865ed14b5da6",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188171Z",
"modified": "2026-10-01T19:54:13.188171Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--10881035-1ccf-53a3-8fbd-2994c4d272c7",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188231Z",
"modified": "2026-10-01T19:54:13.188231Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a91b9939-1d61-56b6-8d6f-2cba9f165a49",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18829Z",
"modified": "2026-10-01T19:54:13.18829Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a85defbd-bf53-5a6d-823a-611904194d4b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188349Z",
"modified": "2026-10-01T19:54:13.188349Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c16fa906-8203-5fb2-94dc-464578735c05",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188407Z",
"modified": "2026-10-01T19:54:13.188407Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4f753844-6d8e-5af7-9766-2f3cfc1e4463",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188467Z",
"modified": "2026-10-01T19:54:13.188467Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ddad4191-de22-535e-bfb6-693db496fdd2",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188526Z",
"modified": "2026-10-01T19:54:13.188526Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3fd00d4b-3ff5-550b-b7cd-01190ea09a12",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188585Z",
"modified": "2026-10-01T19:54:13.188585Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c3fc7194-6dfa-587b-b066-1a2affb40281",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188643Z",
"modified": "2026-10-01T19:54:13.188643Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1a5442d5-b473-5dc6-95de-c10b4f36cc87",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188701Z",
"modified": "2026-10-01T19:54:13.188701Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f3489199-fa70-54aa-9649-0833b3fe3079",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18876Z",
"modified": "2026-10-01T19:54:13.18876Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b7a3ded3-4b16-5f92-83f7-e3ebfbd69aba",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188822Z",
"modified": "2026-10-01T19:54:13.188822Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d6ad1cbb-1958-56a0-a5ba-0ec3d8214d9c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188881Z",
"modified": "2026-10-01T19:54:13.188881Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1a8a550f-b5ab-565a-b54a-d5675441e622",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188939Z",
"modified": "2026-10-01T19:54:13.188939Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--777c7465-2d4d-5614-b416-e9c63a040e79",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.188999Z",
"modified": "2026-10-01T19:54:13.188999Z",
"relationship_type": "uses",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--da8d6c18-6d39-5e64-a4b4-f124c66f31fe",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189058Z",
"modified": "2026-10-01T19:54:13.189058Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--500dd90f-0347-5dc8-954c-930f2cb1531f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189116Z",
"modified": "2026-10-01T19:54:13.189116Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9e00919c-3715-5791-9d25-ef4135c8aa9c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189176Z",
"modified": "2026-10-01T19:54:13.189176Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--5b0fa67a-884e-5236-85fa-173ba06b56e3",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189235Z",
"modified": "2026-10-01T19:54:13.189235Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7e212ffe-edc1-5f45-b7d1-29a8f111d273",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189294Z",
"modified": "2026-10-01T19:54:13.189294Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e58a25f8-317f-5718-a053-8374f58c419e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189353Z",
"modified": "2026-10-01T19:54:13.189353Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--af00f7e8-ca15-5cbb-93df-e75de8b4bfae",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189412Z",
"modified": "2026-10-01T19:54:13.189412Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f8aa88b3-6872-5d44-8911-367f4c039d9c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189471Z",
"modified": "2026-10-01T19:54:13.189471Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7b3be402-9566-5e5f-aaf2-1180fb3ac69f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.18953Z",
"modified": "2026-10-01T19:54:13.18953Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--367cb609-867e-5101-aa82-65fa7019de4f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189588Z",
"modified": "2026-10-01T19:54:13.189588Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--251f2a42-2053-5bad-8f59-2bbc863edc01",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189647Z",
"modified": "2026-10-01T19:54:13.189647Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c2376ec5-ea65-5c63-bcf4-3bd439f8f072",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189705Z",
"modified": "2026-10-01T19:54:13.189705Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--264ffeed-9ae4-5631-9647-479879715e3a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189763Z",
"modified": "2026-10-01T19:54:13.189763Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--24a256d2-e951-5756-b676-f00b23a6af3a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189825Z",
"modified": "2026-10-01T19:54:13.189825Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2c816526-bf75-58aa-ac48-e92fad0ddab0",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189883Z",
"modified": "2026-10-01T19:54:13.189883Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--36ae00a9-f3ea-5df5-a229-bd74335e5192",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.189942Z",
"modified": "2026-10-01T19:54:13.189942Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--cb5aacae-c2e7-52c9-8e7d-0d6d06305884",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190004Z",
"modified": "2026-10-01T19:54:13.190004Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--53143d07-00fd-5495-9b86-d7cf40d22431",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190063Z",
"modified": "2026-10-01T19:54:13.190063Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--95256abf-d5b9-5d57-825d-1a8ab1f7b5fe",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190122Z",
"modified": "2026-10-01T19:54:13.190122Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a1c20a80-245a-5301-b4fd-f631199cdb0f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190181Z",
"modified": "2026-10-01T19:54:13.190181Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--91bb0095-d460-57aa-920c-3b694f76c943",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190241Z",
"modified": "2026-10-01T19:54:13.190241Z",
"relationship_type": "uses",
"source_ref": "malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"target_ref": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ba055d2b-d69d-589b-b331-957a4bd772ed",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190299Z",
"modified": "2026-10-01T19:54:13.190299Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--965ce332-269b-53bf-87fd-9a7b55222856",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190358Z",
"modified": "2026-10-01T19:54:13.190358Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--644953ee-5a27-57e0-871e-f53bc4c55945",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190417Z",
"modified": "2026-10-01T19:54:13.190417Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1c4a2c00-9355-5731-bff3-84237313d708",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190475Z",
"modified": "2026-10-01T19:54:13.190475Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8e0b704e-b162-5fab-b7f4-b0db077529fb",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190534Z",
"modified": "2026-10-01T19:54:13.190534Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e2280561-2c66-5902-af12-c2a49b84d274",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190595Z",
"modified": "2026-10-01T19:54:13.190595Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--73df0480-16a2-5dc1-9d47-4c33f9f04541",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190655Z",
"modified": "2026-10-01T19:54:13.190655Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--355f101f-b018-5414-92f9-a143e26d58e4",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190714Z",
"modified": "2026-10-01T19:54:13.190714Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9defe984-c2ba-5183-8687-9fa5a93e9717",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190772Z",
"modified": "2026-10-01T19:54:13.190772Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d7a0b7bd-64b0-58e8-8139-e010f1e5b79a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190835Z",
"modified": "2026-10-01T19:54:13.190835Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c76984e7-f70b-5f7f-870a-e458583b48d6",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190893Z",
"modified": "2026-10-01T19:54:13.190893Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--911d109d-e2f9-566c-bef6-d4cee787f3e9",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.190952Z",
"modified": "2026-10-01T19:54:13.190952Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e148eedb-11f6-5587-a0aa-ed71f9822cbb",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.19101Z",
"modified": "2026-10-01T19:54:13.19101Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9c9f663e-168b-5ed4-b689-b1797f42d6db",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191068Z",
"modified": "2026-10-01T19:54:13.191068Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d30cc7c1-50d5-5d02-a332-00f74c63a581",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191126Z",
"modified": "2026-10-01T19:54:13.191126Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--cf4c0743-41c4-5a51-9bf3-bbefc02d9dfd",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191187Z",
"modified": "2026-10-01T19:54:13.191187Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--eb603813-8a79-5774-bb8c-de8012cfd3ba",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191246Z",
"modified": "2026-10-01T19:54:13.191246Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--20e0f480-3105-52f7-a1a4-38963dc1505d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191304Z",
"modified": "2026-10-01T19:54:13.191304Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b3f94454-7ad0-5274-8a06-a58fed8b8292",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191362Z",
"modified": "2026-10-01T19:54:13.191362Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0d0a83db-b573-5391-9b2f-627d27a1f388",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191421Z",
"modified": "2026-10-01T19:54:13.191421Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b7fe54cd-129e-5949-b25d-8d5740882278",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191481Z",
"modified": "2026-10-01T19:54:13.191481Z",
"relationship_type": "uses",
"source_ref": "malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"target_ref": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--67af30c2-f571-565a-9336-a8ad0eeedec0",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191542Z",
"modified": "2026-10-01T19:54:13.191542Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--521a2635-3404-5863-9d20-bc9047c4d6ca",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191602Z",
"modified": "2026-10-01T19:54:13.191602Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b86196fe-a7b4-5be7-813d-0feec5040ae7",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191662Z",
"modified": "2026-10-01T19:54:13.191662Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a6322bfe-f2d4-5c4e-b4db-f2735e0b8814",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191722Z",
"modified": "2026-10-01T19:54:13.191722Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--184f8536-fd13-50c4-8e80-4d6487e66375",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191784Z",
"modified": "2026-10-01T19:54:13.191784Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--feab9636-b4bd-5a17-b4a2-d4e78dfbc3ab",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191846Z",
"modified": "2026-10-01T19:54:13.191846Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e214ad40-d338-52ac-8790-29672a0a728e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191905Z",
"modified": "2026-10-01T19:54:13.191905Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ce5dd3f6-4fef-56eb-8d51-7b10ab420404",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.191964Z",
"modified": "2026-10-01T19:54:13.191964Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--539f8726-80da-5dd9-bff8-4ec1b07712af",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192023Z",
"modified": "2026-10-01T19:54:13.192023Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--80bb377d-3359-56a6-bd3d-86e603cbc6d9",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192085Z",
"modified": "2026-10-01T19:54:13.192085Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--19eb6c35-22cc-594f-907e-4fb703280bd4",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192145Z",
"modified": "2026-10-01T19:54:13.192145Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--712b1494-aa2d-5d92-8de5-ff8b691885dc",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192204Z",
"modified": "2026-10-01T19:54:13.192204Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--882fadf4-34a0-5916-9c2c-a25ecf5d7bed",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192265Z",
"modified": "2026-10-01T19:54:13.192265Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9f5c2649-3c29-5070-8169-d3682707f832",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192323Z",
"modified": "2026-10-01T19:54:13.192323Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8df3cf45-2f8f-59f9-bad7-906c3b16b4da",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192385Z",
"modified": "2026-10-01T19:54:13.192385Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--501f0e04-2b75-54af-975d-b91a66efce1d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192445Z",
"modified": "2026-10-01T19:54:13.192445Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ba839399-06d8-5528-971d-16e659aa2c43",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192504Z",
"modified": "2026-10-01T19:54:13.192504Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--15de8060-6b47-5e1e-a159-b1bafad2614a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192563Z",
"modified": "2026-10-01T19:54:13.192563Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c3442ec9-5cad-5ec6-8807-040767d398c9",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192622Z",
"modified": "2026-10-01T19:54:13.192622Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1048896d-8dbe-5e12-89a8-0e06b40c229e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.19268Z",
"modified": "2026-10-01T19:54:13.19268Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--99884dce-a396-54bb-a799-9ee3bfbecb62",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192743Z",
"modified": "2026-10-01T19:54:13.192743Z",
"relationship_type": "uses",
"source_ref": "malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"target_ref": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d506f994-427a-5ade-9d03-271fb73409b2",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192805Z",
"modified": "2026-10-01T19:54:13.192805Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--674ac15d-475a-5b5c-bc4f-eacf5be0de59",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192865Z",
"modified": "2026-10-01T19:54:13.192865Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--cdf52e55-47cb-558e-ad70-04726709df73",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192924Z",
"modified": "2026-10-01T19:54:13.192924Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c345a9b8-2579-5a7b-96b5-58a458fbdc74",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.192985Z",
"modified": "2026-10-01T19:54:13.192985Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b42114e5-716d-593b-b742-6db81e86b2aa",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193044Z",
"modified": "2026-10-01T19:54:13.193044Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4f37d2e4-68ca-52c0-bd9f-d7a7583118ff",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193103Z",
"modified": "2026-10-01T19:54:13.193103Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--07c59bbc-7bdc-5314-a02d-854a3faa45f8",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193162Z",
"modified": "2026-10-01T19:54:13.193162Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--cfd17763-f9d6-5b6c-8558-8aa1c85791ce",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193223Z",
"modified": "2026-10-01T19:54:13.193223Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--49a60a1e-773a-5ef9-b3c2-1aad2c1e5b8f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193283Z",
"modified": "2026-10-01T19:54:13.193283Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--966b615c-4687-5333-8b9b-20565d2b1ade",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193342Z",
"modified": "2026-10-01T19:54:13.193342Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--11fc332a-9c5f-595b-a403-91453c6eded5",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193401Z",
"modified": "2026-10-01T19:54:13.193401Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a54cb2f1-9dde-5b6b-8fb2-b418850becf7",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.19346Z",
"modified": "2026-10-01T19:54:13.19346Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--334cf415-4187-5038-a9e4-67c831e54aa8",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193519Z",
"modified": "2026-10-01T19:54:13.193519Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--56779263-1a95-5128-a9a7-0699099901b8",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193579Z",
"modified": "2026-10-01T19:54:13.193579Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--df64a039-78db-5c79-8c50-cd8869135b64",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193642Z",
"modified": "2026-10-01T19:54:13.193642Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--aab6be8d-0fd2-51a5-9625-b8c5e05f888a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193703Z",
"modified": "2026-10-01T19:54:13.193703Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--641ec06e-020f-5d5f-9d92-8d716dff6574",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193763Z",
"modified": "2026-10-01T19:54:13.193763Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9d2ab490-a5ea-5ea8-b2bc-5d346b690965",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193826Z",
"modified": "2026-10-01T19:54:13.193826Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ab9cef44-74e1-5540-8768-cd79bc296567",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193887Z",
"modified": "2026-10-01T19:54:13.193887Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--45fab04a-4776-538d-8e00-430d7d0a3d8c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.193947Z",
"modified": "2026-10-01T19:54:13.193947Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--61cbb94e-489d-5dcb-8272-d3acec1b2940",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194007Z",
"modified": "2026-10-01T19:54:13.194007Z",
"relationship_type": "uses",
"source_ref": "malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"target_ref": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4bb8287e-0d84-56b2-8010-53194f0c5941",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194066Z",
"modified": "2026-10-01T19:54:13.194066Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4d8430c4-3eeb-5f47-93e2-909b4148b525",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194127Z",
"modified": "2026-10-01T19:54:13.194127Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9f40b910-1e24-51c6-b39d-af6beed02947",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194188Z",
"modified": "2026-10-01T19:54:13.194188Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--73dc9a22-f041-546b-bf7a-1055e8b5ab13",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194247Z",
"modified": "2026-10-01T19:54:13.194247Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a32c20d8-94bb-51a7-aa62-52b8fe2bb233",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194306Z",
"modified": "2026-10-01T19:54:13.194306Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b38538cc-475e-5c2e-843d-610919ea3e5a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194364Z",
"modified": "2026-10-01T19:54:13.194364Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--5060a6b3-e592-5368-bf0d-319e52457923",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194481Z",
"modified": "2026-10-01T19:54:13.194481Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1cbdf032-8fd2-5025-b0f5-7a651a83dec8",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194612Z",
"modified": "2026-10-01T19:54:13.194612Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--097d8751-fd31-53e2-866f-9ad513313739",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194673Z",
"modified": "2026-10-01T19:54:13.194673Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--565e6c69-c812-55ed-9a8b-e6f94ef41663",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194736Z",
"modified": "2026-10-01T19:54:13.194736Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--733b67b1-fcf1-5f84-88e5-4198a9f6f2e9",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194795Z",
"modified": "2026-10-01T19:54:13.194795Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c7dcd53a-f73a-5dca-8bb5-cf4c5db47ea2",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194859Z",
"modified": "2026-10-01T19:54:13.194859Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2cddad85-848d-5b8b-9507-ab43aebcec31",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194919Z",
"modified": "2026-10-01T19:54:13.194919Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e0332396-1fa9-5094-a036-b9ad1b9d03be",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.194978Z",
"modified": "2026-10-01T19:54:13.194978Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--5b5a7b77-972a-5c48-97ed-378cacaa1542",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195037Z",
"modified": "2026-10-01T19:54:13.195037Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--719d75b5-a0f8-5111-b029-a4f95bf4846a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195095Z",
"modified": "2026-10-01T19:54:13.195095Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3cd2b73b-3269-5dab-8ea8-ebae823f5421",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195154Z",
"modified": "2026-10-01T19:54:13.195154Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--67f1a789-c0fa-5a5a-b1f3-6e87aa89c0b0",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195216Z",
"modified": "2026-10-01T19:54:13.195216Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2cc19abc-299d-5875-a641-bb9d0a881f90",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195275Z",
"modified": "2026-10-01T19:54:13.195275Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3887ca5e-ba70-59cd-bdd1-37ba5be6e157",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195334Z",
"modified": "2026-10-01T19:54:13.195334Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f44836a9-087a-540b-b09e-74b735b76f53",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195393Z",
"modified": "2026-10-01T19:54:13.195393Z",
"relationship_type": "uses",
"source_ref": "malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"target_ref": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f219b321-550c-5169-897d-a2f3e527582e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195452Z",
"modified": "2026-10-01T19:54:13.195452Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--465939ba-147f-5844-93f7-de72fcd99d38",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195514Z",
"modified": "2026-10-01T19:54:13.195514Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--439ee472-c5cb-5a40-9bd3-3259287e0581",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195574Z",
"modified": "2026-10-01T19:54:13.195574Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7711d386-9f24-592f-b6c4-45954a1f6d1e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195633Z",
"modified": "2026-10-01T19:54:13.195633Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--93d3d1bf-7d42-5563-8233-6303d9805e69",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195694Z",
"modified": "2026-10-01T19:54:13.195694Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d728269c-f53d-5f79-9a0f-fb983a7abda9",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195753Z",
"modified": "2026-10-01T19:54:13.195753Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--dec88182-39a5-5470-8508-bf6bf5c30b96",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195832Z",
"modified": "2026-10-01T19:54:13.195832Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--221a5ff4-61ff-51bc-97a3-bcade2f4dc2a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195905Z",
"modified": "2026-10-01T19:54:13.195905Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--fc8dad83-81d6-520d-944d-38c16246bc50",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.195964Z",
"modified": "2026-10-01T19:54:13.195964Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ef616094-0daa-5981-a038-9d1f89e0f56c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196026Z",
"modified": "2026-10-01T19:54:13.196026Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7f2d35cb-7799-5e00-894f-22662775ef8c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196085Z",
"modified": "2026-10-01T19:54:13.196085Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9cfdbd78-8f49-550d-a488-d71cad9cd24b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196146Z",
"modified": "2026-10-01T19:54:13.196146Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--bed72f6a-83f5-5ad6-8bc8-28460f765b38",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196208Z",
"modified": "2026-10-01T19:54:13.196208Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--bee83451-98df-5030-ac34-3d4cf2a7a824",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196268Z",
"modified": "2026-10-01T19:54:13.196268Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9f6a04e8-73a8-5ec9-b973-a342fe0fde31",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196329Z",
"modified": "2026-10-01T19:54:13.196329Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8ddf7e44-39a0-5d8a-b94b-e7f48a2dc9ed",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196388Z",
"modified": "2026-10-01T19:54:13.196388Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b3817e74-8c66-5ecf-ae7e-007b49a203ba",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196447Z",
"modified": "2026-10-01T19:54:13.196447Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--60d206a8-b53c-552c-84c8-da56b5e796b5",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196505Z",
"modified": "2026-10-01T19:54:13.196505Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7d6865bc-c623-567f-b6c6-5d0256651076",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196563Z",
"modified": "2026-10-01T19:54:13.196563Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--47401e6a-ec28-5ae3-9a9c-235ff6f7334c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196622Z",
"modified": "2026-10-01T19:54:13.196622Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3433e847-387f-5f73-bf75-71bdc20e066c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196683Z",
"modified": "2026-10-01T19:54:13.196683Z",
"relationship_type": "uses",
"source_ref": "malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"target_ref": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--99d28f3b-ff02-587e-8411-59e526fe9b03",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196743Z",
"modified": "2026-10-01T19:54:13.196743Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--02c3ee8b-957b-5320-b4f3-4b55cc7a1d68",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196806Z",
"modified": "2026-10-01T19:54:13.196806Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0a525de7-b87f-5afb-9465-d472fe40d812",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196868Z",
"modified": "2026-10-01T19:54:13.196868Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--80726728-e2cb-58f8-9fd5-d269a94e7584",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196928Z",
"modified": "2026-10-01T19:54:13.196928Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--90d5b21a-c3f7-5cb4-83f0-224ec8e3cec4",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.196987Z",
"modified": "2026-10-01T19:54:13.196987Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--b02b3869-d51a-5052-a95d-e020260cb8f1",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197047Z",
"modified": "2026-10-01T19:54:13.197047Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e7f11364-da80-51dd-bbf0-c081c24cf0c2",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197105Z",
"modified": "2026-10-01T19:54:13.197105Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a3a2346b-f070-5305-b9d6-ea2776a610a2",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197168Z",
"modified": "2026-10-01T19:54:13.197168Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a2347ea7-8682-5b39-93ec-62032dd27fdf",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197227Z",
"modified": "2026-10-01T19:54:13.197227Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--590b317d-c86d-57c5-a534-7546251e4c94",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197289Z",
"modified": "2026-10-01T19:54:13.197289Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--e6370c75-8d7e-5ef1-8eaf-5f24cf6e5511",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197349Z",
"modified": "2026-10-01T19:54:13.197349Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--96067b05-d293-5f38-85f7-8e58ea83c02c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197408Z",
"modified": "2026-10-01T19:54:13.197408Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--718ef285-ec9b-5140-979d-3a947620fe1f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197469Z",
"modified": "2026-10-01T19:54:13.197469Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f95249e6-fe99-5635-b55f-8e53b3b4fabf",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197528Z",
"modified": "2026-10-01T19:54:13.197528Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ff312000-e0b1-505c-894d-32258eb755ea",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197588Z",
"modified": "2026-10-01T19:54:13.197588Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--56ce2d21-70a7-5c1b-9d5c-1600fa8d39ce",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.19765Z",
"modified": "2026-10-01T19:54:13.19765Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2b678ce6-1996-54aa-aa1e-44474d6021ed",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197709Z",
"modified": "2026-10-01T19:54:13.197709Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d2936388-097a-501e-8389-aa4143722e55",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197767Z",
"modified": "2026-10-01T19:54:13.197767Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--498861ca-d014-5c79-a1d8-b8bfe55695f5",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197842Z",
"modified": "2026-10-01T19:54:13.197842Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--94b21481-4126-555e-8f48-40a377badf2d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197902Z",
"modified": "2026-10-01T19:54:13.197902Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8a2a3b9a-1a90-5a51-9652-db62c32e2c30",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.197965Z",
"modified": "2026-10-01T19:54:13.197965Z",
"relationship_type": "uses",
"source_ref": "malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"target_ref": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3d370cb3-8bec-52d7-952d-f3d0fce6116d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198026Z",
"modified": "2026-10-01T19:54:13.198026Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--6f629277-54b4-5285-815f-866191b8e7b7",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198086Z",
"modified": "2026-10-01T19:54:13.198086Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d36a7a47-ee4a-556d-8b24-9fbefae84c87",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198147Z",
"modified": "2026-10-01T19:54:13.198147Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7a272d72-68bd-585b-b909-3b86a5df323e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198206Z",
"modified": "2026-10-01T19:54:13.198206Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--00857f13-52f6-5b13-8206-063abf86d37e",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198267Z",
"modified": "2026-10-01T19:54:13.198267Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1b22e8b8-e2ad-56c5-9eba-81f9d896b96d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198326Z",
"modified": "2026-10-01T19:54:13.198326Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--48f75846-1c4a-5768-9e41-fd5a3ace4cc3",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198385Z",
"modified": "2026-10-01T19:54:13.198385Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--1cdfc8c9-ef02-5bc4-bcb0-099cb1b2d1aa",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198476Z",
"modified": "2026-10-01T19:54:13.198476Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9003cb11-864d-5889-871f-b9a03d132beb",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198534Z",
"modified": "2026-10-01T19:54:13.198534Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--61e66647-c586-5f30-85a3-0e1600afa8a2",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198595Z",
"modified": "2026-10-01T19:54:13.198595Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--708155ce-578e-5aa4-843c-bb591d148888",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198657Z",
"modified": "2026-10-01T19:54:13.198657Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9b073690-42f8-5c1d-ac91-62f57c82fc88",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198717Z",
"modified": "2026-10-01T19:54:13.198717Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--3b65a5f6-6ac5-527f-b3db-a3b41a7966da",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198776Z",
"modified": "2026-10-01T19:54:13.198776Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--a6895cde-8837-5292-8893-5181324715cf",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198841Z",
"modified": "2026-10-01T19:54:13.198841Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--25b93f99-2074-5763-84e9-61c29303d1aa",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.198901Z",
"modified": "2026-10-01T19:54:13.198901Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--85683ef8-2f93-5cdb-8238-0ca8ae4dc605",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.19896Z",
"modified": "2026-10-01T19:54:13.19896Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9d1d5c55-1d20-513e-ae56-67f6073ed171",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.19902Z",
"modified": "2026-10-01T19:54:13.19902Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--5caa7dec-84e4-52c0-8808-08e3fb21ae8b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199079Z",
"modified": "2026-10-01T19:54:13.199079Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d4d2196a-dc03-5dea-a9c4-ba264ce5c650",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199141Z",
"modified": "2026-10-01T19:54:13.199141Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--f6dd571f-2c13-5277-a8b7-2de49b50914f",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199205Z",
"modified": "2026-10-01T19:54:13.199205Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--177e2266-3746-5061-9e44-4fddda9d7445",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199265Z",
"modified": "2026-10-01T19:54:13.199265Z",
"relationship_type": "uses",
"source_ref": "malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"target_ref": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7c51def8-ddfb-5fc2-82ad-ccba279460c1",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199324Z",
"modified": "2026-10-01T19:54:13.199324Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--bb167a80-937a-5729-b4c5-f6ad1c6d0388",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199383Z",
"modified": "2026-10-01T19:54:13.199383Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0104b126-a76d-5f0c-bf93-1c62ea901f00",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199442Z",
"modified": "2026-10-01T19:54:13.199442Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--93cd3a58-c5aa-51d4-aa00-75f0257767d2",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199501Z",
"modified": "2026-10-01T19:54:13.199501Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--123c0a03-f8da-5ec0-8282-dc68d65f60a5",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.19956Z",
"modified": "2026-10-01T19:54:13.19956Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--272e6862-400c-53e9-9b78-202d7e71ce9b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199622Z",
"modified": "2026-10-01T19:54:13.199622Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--debfdd3c-cabc-57cd-9f40-416bd997f1ae",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199681Z",
"modified": "2026-10-01T19:54:13.199681Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--97d8c3dc-0096-5424-a991-ae18cb1c5019",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199741Z",
"modified": "2026-10-01T19:54:13.199741Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--10558ab0-44cd-50c7-a330-9a4ff4111b52",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199805Z",
"modified": "2026-10-01T19:54:13.199805Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d5c05632-d347-520e-94da-97489d054b5c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199867Z",
"modified": "2026-10-01T19:54:13.199867Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8b9c8e02-5cce-5293-9f78-ade46b24c41b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199929Z",
"modified": "2026-10-01T19:54:13.199929Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--620dabbf-e920-5773-8b79-529273a16277",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.199988Z",
"modified": "2026-10-01T19:54:13.199988Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--9de04fd3-8fbb-5045-a36d-aaacee947903",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200047Z",
"modified": "2026-10-01T19:54:13.200047Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--2dfb59e1-778e-5c37-a1ca-a4a75930fc4c",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200108Z",
"modified": "2026-10-01T19:54:13.200108Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--dcd2e7a7-287d-550a-b2b3-000f3453afa6",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200167Z",
"modified": "2026-10-01T19:54:13.200167Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--5cfa26e6-d446-5265-9654-b4bc4f03e5f1",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200226Z",
"modified": "2026-10-01T19:54:13.200226Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--132d8ee2-8256-50e3-b4fa-adbbe89be32a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200285Z",
"modified": "2026-10-01T19:54:13.200285Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--8b0cb42f-84b2-5190-9669-2e067466274d",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200344Z",
"modified": "2026-10-01T19:54:13.200344Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--c4cf1a1c-0e9c-5905-b3a7-84b8f3f7b4f8",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200405Z",
"modified": "2026-10-01T19:54:13.200405Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--544e913e-627b-532d-b1c4-b5960ec407fe",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200467Z",
"modified": "2026-10-01T19:54:13.200467Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--bfd384d5-3a9d-5b07-8c12-5340a42dbfdb",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200527Z",
"modified": "2026-10-01T19:54:13.200527Z",
"relationship_type": "uses",
"source_ref": "malware--211af347-8670-53fa-b4f3-ae6276db3867",
"target_ref": "infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--d6f41342-f1d0-5aa3-8f84-efa8550b0b7b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200589Z",
"modified": "2026-10-01T19:54:13.200589Z",
"relationship_type": "related-to",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "tool--51bc88ac-1909-5cdd-a97b-a004a5a69f12",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--07b21bb7-9ab3-579c-9f8f-88eaaf75f575",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.20065Z",
"modified": "2026-10-01T19:54:13.20065Z",
"relationship_type": "related-to",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "tool--4b957a0e-efed-5e07-9309-2a437bad6185",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--81ed9a9c-519d-5a84-bed7-80d95d28fe72",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200711Z",
"modified": "2026-10-01T19:54:13.200711Z",
"relationship_type": "related-to",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "tool--d53e47ff-7191-50dc-bee2-feb1cb30cbe6",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--487eb37f-ad01-516d-a945-a14f485a76b7",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.20077Z",
"modified": "2026-10-01T19:54:13.20077Z",
"relationship_type": "related-to",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "tool--afcfd12c-3ff5-59e6-90f0-2f739547ca91",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--4576ee59-b630-503e-b795-3c8e8452a73b",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200833Z",
"modified": "2026-10-01T19:54:13.200833Z",
"relationship_type": "related-to",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "tool--e675fa5c-f90a-5555-b249-7e1a94c1fc93",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--05d63a8b-8f1c-57a5-8417-792d1ce97c37",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200892Z",
"modified": "2026-10-01T19:54:13.200892Z",
"relationship_type": "related-to",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "tool--c760731b-beb1-542e-9ade-7a7bb67b2434",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--fb0ddf1e-cae2-5e50-88ff-cbecafdf0e3a",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.200951Z",
"modified": "2026-10-01T19:54:13.200951Z",
"relationship_type": "related-to",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "tool--f74c71fe-d8db-5a4f-a72e-64ed43a00e9a",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ceaeab9b-c1a5-5d08-a7e6-5fb7bd9a8406",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.201012Z",
"modified": "2026-10-01T19:54:13.201012Z",
"relationship_type": "related-to",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "tool--cbe66483-3a8f-51d7-a3d1-5ea4d2b73ae0",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--7b72f3a6-f315-516c-96a5-7b854171c626",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.201074Z",
"modified": "2026-10-01T19:54:13.201074Z",
"relationship_type": "related-to",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "tool--dff3e5e0-bdac-52f1-a41f-dd8e43084704",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0c5be3f9-d650-5fa2-82a0-eccb6101baa3",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.201134Z",
"modified": "2026-10-01T19:54:13.201134Z",
"relationship_type": "related-to",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "tool--75f1c114-02ff-552e-94e0-55c28d4f2cb9",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--ed802492-0502-5606-8907-58c66d6e48ac",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.201196Z",
"modified": "2026-10-01T19:54:13.201196Z",
"relationship_type": "related-to",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "tool--d9239561-7874-5d1b-9cda-e6835dc7d12d",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--03329326-f625-5353-98f2-50f9fd545f04",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.201256Z",
"modified": "2026-10-01T19:54:13.201256Z",
"relationship_type": "related-to",
"source_ref": "malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"target_ref": "tool--5fd6d807-0015-57a2-bf64-d076201f281e",
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "report",
"spec_version": "2.1",
"id": "report--a9f4eae3-2bc4-5503-9477-2a7eaafb1dbf",
"created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d",
"created": "2026-10-01T19:54:13.201415Z",
"modified": "2026-10-11T04:24:14.475329Z",
"name": "EvilSoul-Engine: A Brazilian Stealer-Builder Malware-as-a-Service",
"report_types": [
"threat-report"
],
"published": "2026-07-03T00:00:00Z",
"object_refs": [
"ipv4-addr--3d790e8d-67e1-5b55-ad95-a33d6bd0f109",
"indicator--46b7e506-045a-5849-bf54-0e519b3e0f41",
"ipv4-addr--0cc954d0-ab7e-5403-b760-ecce89342889",
"indicator--bb14b624-d5e8-5f37-bd0e-c6226f7c9cf4",
"ipv4-addr--23b2f09e-cec0-5eb7-afe8-88f3d5f79d8a",
"indicator--98fc5b94-ab86-5d56-8310-f18fce62bda3",
"ipv4-addr--73f24759-34fb-55a8-9082-527356702c28",
"indicator--8f63ccdb-688d-54d9-8abd-bc25cf65d8fd",
"ipv4-addr--c5efe09e-80e4-5b8c-9d58-d0868a2ae828",
"indicator--956b16bd-2868-5b75-a188-d4aa82f16bd8",
"ipv4-addr--9987ebe4-0759-52d4-b134-98abaa18b54d",
"indicator--fbbe1eb6-7aa4-50fb-8a5d-6ddf9ca8196f",
"domain-name--afca77a1-8e44-570b-9584-63d3356769d3",
"indicator--e7cc84a5-aa27-5a54-a7cf-38dc1dfa5d40",
"domain-name--ea881463-6ef4-55f6-90e3-f31fef1715e8",
"indicator--06a03fd5-b55a-56cd-b60f-8355d15ecbd5",
"domain-name--0fc12c42-c1db-542c-8c8e-19e19784f2da",
"indicator--314ef298-f608-5c92-8c57-fe5a93a11da3",
"domain-name--11956e8f-7958-5e4d-ad6f-21f43f9f006b",
"indicator--5ba0936a-572c-5afb-8f14-098cf4458169",
"domain-name--9ea827e8-2129-5237-89c3-bbad62dc4eab",
"indicator--603fbed9-f0f3-5e2e-895a-e67ecffa041d",
"url--be8aa977-a7ec-586a-be3a-b5f7db8fac47",
"indicator--61e25531-4098-560f-94c8-fc8348e38fed",
"url--6f3b0478-0aba-5066-a1ea-2b5921c39d20",
"indicator--d5ab16b9-949e-5aae-b1c3-e66c32b648b4",
"url--74756ddf-261c-5b39-9ce8-bfed75793359",
"indicator--1087c29b-b9b4-5cc5-a14f-f05641aaab07",
"url--33c78969-2d62-5f9e-a3c8-14e42455bd70",
"indicator--697def34-d9ed-5244-8717-5c3e2140b1aa",
"url--4842c4fb-587a-55f6-9fb1-871bf623ec78",
"indicator--125571e3-db6a-5a86-8b53-13422a34b715",
"url--2a449c37-117c-53d5-8a17-99669927f4b6",
"indicator--b0aba044-09e1-5f37-81f9-0d3102877d55",
"url--c10f3cc2-0cbb-587a-8a04-07032876b6cb",
"indicator--b7fa97ff-0977-5334-8f3d-1d290e5a141d",
"domain-name--ed0f5ce9-4850-50bd-a64e-1a7c3617c5cf",
"indicator--f728748b-968a-5d9d-998e-e1967686ca2e",
"domain-name--4eecb7d0-2ae7-5da5-a50e-c2c42f64f6b4",
"indicator--64f68ffd-5598-5e75-a8e6-108679f2ff53",
"domain-name--d2f6c00a-5f40-55f7-abd0-fad84b210151",
"indicator--fa541fcc-cf72-5c01-a6a3-2955fecb96b8",
"domain-name--4dea3ea7-6c0e-54b4-8e89-05dcbc4dc641",
"indicator--6907b9eb-f4b5-5b94-83a6-6543590c8b03",
"domain-name--7f9bae1e-544b-55cc-91c4-ccf5885895eb",
"indicator--699fd09a-14e8-5b34-9a19-642042da338b",
"file--2d19688b-470b-5e10-95ec-c25d8259ae59",
"indicator--d487abaa-2f25-5cb8-99d3-61c096417f12",
"file--93558544-aa91-52fd-a95d-2d6fc7c4de44",
"file--2d5de675-6a31-5287-a80e-8da1d8bf7ddc",
"indicator--5607a0be-1a3e-57da-894f-cf291eed3b54",
"file--6bd7f850-8a40-5da6-ad61-66e5882f8223",
"indicator--cfb90865-9bc0-53ac-ab5e-20b3e1331a41",
"file--9ebd87da-8486-5612-b890-edb22c10e90e",
"file--0a3d4b6c-aab7-5faa-bc4a-b88c74c39f5e",
"indicator--dd61191b-3130-5b3f-9dab-5eeb93e23d04",
"file--82831ab5-8d90-5114-9366-1e6684c24502",
"indicator--595e7e26-9368-5b2b-8adf-87b418b18f01",
"file--17b6f01f-1ee7-540c-83f7-e40387ab9e45",
"file--2762220b-ffc6-5085-a1d5-e9ee6ddec12f",
"indicator--56e648c4-f76f-5b8f-ab45-313fd3b3457f",
"file--2e8f5bf6-9acc-58d8-82aa-b890cd99cdeb",
"file--9b02a63f-39be-59ed-8d17-cff69556940c",
"file--34ec8840-df42-5236-87a3-f9c85c1a6755",
"file--d46575fb-77ca-5c7a-9f5a-abeb14eecba4",
"indicator--0e4ece88-fc55-526f-9584-72c0fdad8fbe",
"file--70020f4e-d0a7-5051-baf3-a91adf1b5385",
"file--04828ab9-acbe-5647-9089-fbb8b0cce223",
"indicator--be28ff7e-3d67-52b7-9f08-d4e4132d19be",
"file--29e6b330-8a25-5756-a600-9d430add4afa",
"file--20b2c0f9-0698-505b-9dd3-8c86e68b44f0",
"indicator--f6a4ebb0-f9e8-5832-8f9f-cb0159f65675",
"file--030bae2d-cded-514c-8e0f-5d867d291a74",
"file--56a34f85-8e23-5d22-9a77-df8b41df6dcd",
"file--36a0fce0-dcf2-5e16-840b-349852d017e4",
"indicator--62129313-651a-540e-92c8-cf60ed76ced6",
"file--ce9e2382-3cbe-5063-aac1-c663dc3f931f",
"file--b5a6f4bb-b6c4-5cf8-b082-a4b3e7588f60",
"file--c9a4fb0d-da5e-5701-aad2-83f61c76e61f",
"indicator--5d491a50-d8d8-545c-a4e5-bfa2eb5b66f3",
"indicator--5c601fee-ef41-52ff-b6e2-d26bb274d903",
"indicator--8eb1f406-6c2e-5e24-9e82-0f764aa3a4af",
"indicator--d9213b19-02af-5913-831c-73018b12b053",
"indicator--d4900748-7a4d-5bb6-b797-bcba720f22d9",
"indicator--1fb61bec-c9d6-57fd-82b5-89c16137ed37",
"indicator--b08cecb2-9f3d-5b76-9936-d78d4b75942d",
"indicator--f42b0e4c-6bb6-57dc-a650-a78be3601347",
"indicator--84faab27-93c6-5e86-a657-8b522a23e976",
"indicator--1560c96b-28fd-5b01-927a-e1ba59ed568a",
"indicator--8fc5d48b-d42b-5667-bed2-a11d9fba74de",
"indicator--f295a45f-a4cb-55dd-855a-4a0608f2fb04",
"indicator--34511101-f43a-5cdd-bc3b-c08b02813517",
"malware--281ac773-d08e-5cee-89f5-9a11e1fd1233",
"malware--4f57ff13-4fbb-5d8b-8d11-f8880547f577",
"malware--9276bd17-8d8b-5ace-8485-4b3b60a0ff61",
"tool--51bc88ac-1909-5cdd-a97b-a004a5a69f12",
"malware--e8bff3d9-fa83-5317-b71e-2b990607e37c",
"malware--b1a55409-5265-5c98-9bf0-bf3fb15c782d",
"tool--4b957a0e-efed-5e07-9309-2a437bad6185",
"malware--753fc5d3-a8d1-5267-9f2a-09797a8749bf",
"malware--55953dd5-f27c-5ef6-bf5f-d10db365e1f9",
"tool--d53e47ff-7191-50dc-bee2-feb1cb30cbe6",
"malware--0ee6885e-cd77-5c7d-8a67-da1ee9102ebd",
"tool--afcfd12c-3ff5-59e6-90f0-2f739547ca91",
"tool--e675fa5c-f90a-5555-b249-7e1a94c1fc93",
"tool--c760731b-beb1-542e-9ade-7a7bb67b2434",
"malware--07a9fcd9-bad9-539a-955b-260d620fbf01",
"tool--f74c71fe-d8db-5a4f-a72e-64ed43a00e9a",
"malware--09ecebbb-e834-56b4-9a29-4cb00bd6d96f",
"tool--cbe66483-3a8f-51d7-a3d1-5ea4d2b73ae0",
"malware--6af704cd-4b4d-5bf3-bdf6-e8780909cc00",
"tool--dff3e5e0-bdac-52f1-a41f-dd8e43084704",
"tool--75f1c114-02ff-552e-94e0-55c28d4f2cb9",
"malware--31f4f1dd-7d16-58db-8034-1416a8d45ca5",
"tool--d9239561-7874-5d1b-9cda-e6835dc7d12d",
"tool--5fd6d807-0015-57a2-bf64-d076201f281e",
"malware--211af347-8670-53fa-b4f3-ae6276db3867",
"attack-pattern--2a264b9c-3fd7-5eeb-9ade-d73008a13713",
"attack-pattern--aa8b0690-c505-5342-9b08-0e02886a69bc",
"attack-pattern--716aa1a6-8f94-57f9-b2b2-9556a5f81acb",
"attack-pattern--030bfe25-492a-5e3f-aad5-1c799345aa06",
"attack-pattern--519ad548-2612-50a9-b36f-4c734818a1e0",
"attack-pattern--a08f8085-d76d-5961-9cc5-38087943d6db",
"attack-pattern--70904fdb-eb8c-5a21-a92c-b360b1e3ac6b",
"attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8",
"attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4",
"attack-pattern--16d93383-9cd3-53c0-94a2-a75a3a9e3a9e",
"attack-pattern--f04532fb-150d-5d27-99b3-5392af504899",
"attack-pattern--bc4aee16-aeaf-5d06-9023-dbf06eead1e1",
"attack-pattern--75390216-c11c-5124-96a6-9e2e4abd3eac",
"attack-pattern--6658900e-2ea1-58c9-8299-3af19b543ee6",
"attack-pattern--c9653036-cc40-5cbd-a547-4af6331fb026",
"attack-pattern--c6920460-6697-5d18-8569-ca30c39598fa",
"attack-pattern--f38353ba-cfac-577c-ac86-5e3f0c5fb314",
"attack-pattern--ed69c65f-7bc6-5a49-accd-759abe8c1c1b",
"attack-pattern--06cbe52b-abcb-5b54-a3ec-c553a82c7374",
"attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc",
"infrastructure--3be33cba-83f9-587b-8666-6ead4b3fb949",
"relationship--edf097e9-a38a-5173-92f0-e87855a11e0f",
"relationship--8d1ae925-f80c-51bb-af99-9f5f92449192",
"relationship--f7bb6b22-9793-5cfa-b8ea-4fc16a05b156",
"relationship--ace99f94-d61f-51af-8daf-ae932a5dc4f6",
"relationship--c9d4cfe0-397d-55a4-864a-a4e654fea2f5",
"relationship--845f3f29-69f6-5447-a5b3-e61fc58374b8",
"relationship--024c97f6-bfd5-58ba-bdfa-8aea41c3408f",
"relationship--e8e551c0-e729-50d3-92f7-f7d5a6355fda",
"relationship--2a92e71a-1b62-5349-8660-2d8398209a05",
"relationship--11332e36-2f50-5c8e-91fd-fe4dc2df2b12",
"relationship--92961320-9fee-58f2-92b2-bd3ed138ac92",
"relationship--f7959d62-b5be-5e58-8dca-93040e1eb745",
"relationship--03266b40-706b-56b9-bbe4-d0ecd6f86e95",
"relationship--af90f3a4-391e-52d5-992d-24be207347d5",
"relationship--5af0d544-ff47-5631-900f-e0d2aca7bd4c",
"relationship--5062d5cb-e20c-56ef-a1f6-311edb837876",
"relationship--d7b15d3d-eb78-5018-b509-447996fac78c",
"relationship--a93d5c17-5578-5aac-b635-d3d40e6325d0",
"relationship--2ee23eb4-6704-5ecb-9de3-62bf1291955c",
"relationship--0900978c-454a-571a-9e2c-6be4b92e74fe",
"relationship--e8ae4caf-a32a-5455-93ad-4da314a4410b",
"relationship--049684da-db63-5d92-b268-a47793781deb",
"relationship--2038082c-bac5-58dc-bc62-eeed24fd4494",
"relationship--a44f8e3c-49ed-5d38-8c66-8f4194168e70",
"relationship--f853f6fa-e0e6-5057-af10-9874fa7e1308",
"relationship--42147ddc-cc51-5b83-acee-c065d4890ec3",
"relationship--134f285f-d36a-5f62-989b-75b838eb851e",
"relationship--aa20b24b-036b-567b-b66e-c9a65150c03f",
"relationship--895753e9-c795-5bf8-a5fb-429c2967113f",
"relationship--f6f33dca-6bd6-5706-9f26-fef59d3a14d2",
"relationship--9b6c73aa-8405-5286-904b-a04612f86a6a",
"relationship--2fc6c557-ab2a-5cc8-8920-2199fb0764dd",
"relationship--5e553e30-fbc9-5f07-b4ea-f5edcd2c33fe",
"relationship--94e28fac-3f99-5589-9f59-897aeaf2ebf9",
"relationship--729f2b53-012b-56f2-8509-0119659393af",
"relationship--3cf457b7-f3c7-5804-a251-f32ca0f6e469",
"relationship--6188171e-eac6-5cc5-8583-fcc6488c8622",
"relationship--020bbcb6-2064-580a-96d1-3b211926caf6",
"relationship--acbb818e-2b25-5fb8-8616-932b80c4b73d",
"relationship--9446132a-3788-5144-9288-5f63846190e3",
"relationship--f9e3f51f-0b0e-5f26-add0-00986a5e1808",
"relationship--b3b7e851-e537-5138-83c7-d4c69b048c3e",
"relationship--7c90ec33-5126-5015-902a-472859328307",
"relationship--becbdacf-1201-525b-8d70-81ae58b5ef76",
"relationship--7267005d-1795-53d3-a77d-4835e51e7d8e",
"relationship--f7eb2953-515c-5385-8841-82055055d0b6",
"relationship--06bb6bea-bc3b-5049-9d63-a59af68b8523",
"relationship--c573fe45-8daa-5ff3-9688-9cdd5e8c2308",
"relationship--4b3d8a6d-de03-556e-b3e5-0c55624fb41f",
"relationship--92e4919c-ce8e-5572-b3e8-221ca46dce37",
"relationship--9529d192-6f71-5990-84dc-85b81a6eb3f5",
"relationship--f1bf3c2d-03dd-53bb-ae87-3e00b4036b6b",
"relationship--aa8cca20-7807-5599-9943-4ff1ea531d96",
"relationship--f7d8fb36-0d65-5b81-9a50-4e56a66ef79c",
"relationship--47158991-70f7-5425-91a4-9fd298bc587e",
"relationship--f84b9818-f3a5-5b25-ac26-26b1817df399",
"relationship--537b36e2-adba-504d-b9c8-7a4adb1ef320",
"relationship--b39c17fc-b44e-556e-9042-74bbc0937817",
"relationship--315cb67e-c412-5f0a-b971-0be74c03e50c",
"relationship--7903a1bb-9c76-512c-b259-a0da8acb0909",
"relationship--10c09d94-2f0a-5bf9-825a-b9a4abf42614",
"relationship--4cf9902f-4159-5fd4-9b56-c436448585d3",
"relationship--8b32a194-b3ec-54f6-8974-08793b6ec22b",
"relationship--a06795fc-3876-5d5a-bdd3-a62836326589",
"relationship--a9e9d845-e050-510d-ba3b-77fdfabf92ad",
"relationship--c6821465-fa79-506e-801c-18207b157015",
"relationship--187dd435-7251-5d96-84a1-e7352dcef23b",
"relationship--8574b44c-60c5-5eb1-91a0-a155b68f80ec",
"relationship--6a6815a5-940e-5cdf-aa5a-137c4dba1b1d",
"relationship--69d40ddc-fc5f-5ee8-ba09-1a71c2e13b22",
"relationship--47f026d1-109a-5367-bf22-7d9eed19ac78",
"relationship--904a7634-dd16-5526-b3b6-c3efd1bcf3ed",
"relationship--8c0562f6-a8eb-5093-b8a2-3188db7cdc09",
"relationship--c5bc85e1-f65b-5451-b36e-508905c49af8",
"relationship--55eed95e-693b-598d-8e3c-ad7c51baa30d",
"relationship--08cfbc15-aa09-58f6-99db-ec83d6b63359",
"relationship--170bb3a9-d577-53c8-b464-bd04d81c5db3",
"relationship--77ecce8b-6334-56ba-b543-cbbb59648792",
"relationship--db57c9ca-06b9-5c93-8e55-2a5e0d267b4e",
"relationship--7337bc5d-a721-5dfb-a23a-17e5e94faa6f",
"relationship--0a69aea5-e808-5630-a903-da5eb20c81c2",
"relationship--b18cc6d2-3c8c-5583-b237-b2a6f8dcefb3",
"relationship--b61a6042-4900-5a58-b500-1098dface44c",
"relationship--800e60d9-8a3c-5ba3-a81d-823e6e30b8c4",
"relationship--e03e8d7d-e4b6-51f2-a06e-e83789b30749",
"relationship--3c11d08e-59e9-576c-b990-11ea124cac57",
"relationship--44e0e69d-463c-5cca-bcb2-f68929f05b33",
"relationship--ca6f5732-056d-5a6e-99b4-81f1bfe2734e",
"relationship--78d19635-3ac5-5da0-888b-4de403b76bc9",
"relationship--2208ce4a-9b5e-5f60-91ae-455daf19459f",
"relationship--66dd06e8-0849-5a9d-b969-07c564ee3ddd",
"relationship--3586b75b-404d-53f2-8f8e-1caca9622021",
"relationship--c8eb3e08-9dad-5b9a-bbba-e0570156980f",
"relationship--5bc6aac5-a343-572d-aad1-da14897dce70",
"relationship--3047f0ae-c9af-5ebc-9ddb-437b02990043",
"relationship--f270fa41-eff1-5102-b909-f59ef8094b9f",
"relationship--d5ced1a1-6d8d-5cbe-88a7-2c5428ee81db",
"relationship--388fbd9c-3f4d-5ba1-91d8-fcbffb620702",
"relationship--17d0cc6c-af0c-5466-915d-5608df8f1aff",
"relationship--cd9926df-6352-57a9-81fc-0df785184aa0",
"relationship--d52f9b25-9778-5c63-9b9c-cd02a6c2947a",
"relationship--4fc300e4-a068-5738-9cc4-55a62a091f75",
"relationship--ba2f48e5-5bb7-53f5-8b39-6df864021aed",
"relationship--b710854f-7b8a-5a71-9683-715f562fefab",
"relationship--2e121456-75ad-50e5-8343-3655b644ec69",
"relationship--39c25b54-dac1-5ed2-a21d-3445d9da21e0",
"relationship--6244126f-0a8d-57bf-a237-f849b931484f",
"relationship--3b317bd8-6f0e-5fe0-a9ce-b3c4426b57cf",
"relationship--3dffa70a-29c2-504b-a551-dc48e1d81e9a",
"relationship--6d44da69-0fd8-5525-9685-09f12d37dafa",
"relationship--96481ad2-1b1b-5118-b717-b38ac157f1a9",
"relationship--a842aec4-dfb3-5289-a5fe-13fe9d9a0ebb",
"relationship--9661d772-de05-5c51-af02-409c590d70cc",
"relationship--22c4cc38-4069-5ad7-bea9-bb2bc4151533",
"relationship--6d4be1ac-5bd1-58e7-9341-a0ef82ca8c7d",
"relationship--bb733e44-545d-5322-9652-865ed14b5da6",
"relationship--10881035-1ccf-53a3-8fbd-2994c4d272c7",
"relationship--a91b9939-1d61-56b6-8d6f-2cba9f165a49",
"relationship--a85defbd-bf53-5a6d-823a-611904194d4b",
"relationship--c16fa906-8203-5fb2-94dc-464578735c05",
"relationship--4f753844-6d8e-5af7-9766-2f3cfc1e4463",
"relationship--ddad4191-de22-535e-bfb6-693db496fdd2",
"relationship--3fd00d4b-3ff5-550b-b7cd-01190ea09a12",
"relationship--c3fc7194-6dfa-587b-b066-1a2affb40281",
"relationship--1a5442d5-b473-5dc6-95de-c10b4f36cc87",
"relationship--f3489199-fa70-54aa-9649-0833b3fe3079",
"relationship--b7a3ded3-4b16-5f92-83f7-e3ebfbd69aba",
"relationship--d6ad1cbb-1958-56a0-a5ba-0ec3d8214d9c",
"relationship--1a8a550f-b5ab-565a-b54a-d5675441e622",
"relationship--777c7465-2d4d-5614-b416-e9c63a040e79",
"relationship--da8d6c18-6d39-5e64-a4b4-f124c66f31fe",
"relationship--500dd90f-0347-5dc8-954c-930f2cb1531f",
"relationship--9e00919c-3715-5791-9d25-ef4135c8aa9c",
"relationship--5b0fa67a-884e-5236-85fa-173ba06b56e3",
"relationship--7e212ffe-edc1-5f45-b7d1-29a8f111d273",
"relationship--e58a25f8-317f-5718-a053-8374f58c419e",
"relationship--af00f7e8-ca15-5cbb-93df-e75de8b4bfae",
"relationship--f8aa88b3-6872-5d44-8911-367f4c039d9c",
"relationship--7b3be402-9566-5e5f-aaf2-1180fb3ac69f",
"relationship--367cb609-867e-5101-aa82-65fa7019de4f",
"relationship--251f2a42-2053-5bad-8f59-2bbc863edc01",
"relationship--c2376ec5-ea65-5c63-bcf4-3bd439f8f072",
"relationship--264ffeed-9ae4-5631-9647-479879715e3a",
"relationship--24a256d2-e951-5756-b676-f00b23a6af3a",
"relationship--2c816526-bf75-58aa-ac48-e92fad0ddab0",
"relationship--36ae00a9-f3ea-5df5-a229-bd74335e5192",
"relationship--cb5aacae-c2e7-52c9-8e7d-0d6d06305884",
"relationship--53143d07-00fd-5495-9b86-d7cf40d22431",
"relationship--95256abf-d5b9-5d57-825d-1a8ab1f7b5fe",
"relationship--a1c20a80-245a-5301-b4fd-f631199cdb0f",
"relationship--91bb0095-d460-57aa-920c-3b694f76c943",
"relationship--ba055d2b-d69d-589b-b331-957a4bd772ed",
"relationship--965ce332-269b-53bf-87fd-9a7b55222856",
"relationship--644953ee-5a27-57e0-871e-f53bc4c55945",
"relationship--1c4a2c00-9355-5731-bff3-84237313d708",
"relationship--8e0b704e-b162-5fab-b7f4-b0db077529fb",
"relationship--e2280561-2c66-5902-af12-c2a49b84d274",
"relationship--73df0480-16a2-5dc1-9d47-4c33f9f04541",
"relationship--355f101f-b018-5414-92f9-a143e26d58e4",
"relationship--9defe984-c2ba-5183-8687-9fa5a93e9717",
"relationship--d7a0b7bd-64b0-58e8-8139-e010f1e5b79a",
"relationship--c76984e7-f70b-5f7f-870a-e458583b48d6",
"relationship--911d109d-e2f9-566c-bef6-d4cee787f3e9",
"relationship--e148eedb-11f6-5587-a0aa-ed71f9822cbb",
"relationship--9c9f663e-168b-5ed4-b689-b1797f42d6db",
"relationship--d30cc7c1-50d5-5d02-a332-00f74c63a581",
"relationship--cf4c0743-41c4-5a51-9bf3-bbefc02d9dfd",
"relationship--eb603813-8a79-5774-bb8c-de8012cfd3ba",
"relationship--20e0f480-3105-52f7-a1a4-38963dc1505d",
"relationship--b3f94454-7ad0-5274-8a06-a58fed8b8292",
"relationship--0d0a83db-b573-5391-9b2f-627d27a1f388",
"relationship--b7fe54cd-129e-5949-b25d-8d5740882278",
"relationship--67af30c2-f571-565a-9336-a8ad0eeedec0",
"relationship--521a2635-3404-5863-9d20-bc9047c4d6ca",
"relationship--b86196fe-a7b4-5be7-813d-0feec5040ae7",
"relationship--a6322bfe-f2d4-5c4e-b4db-f2735e0b8814",
"relationship--184f8536-fd13-50c4-8e80-4d6487e66375",
"relationship--feab9636-b4bd-5a17-b4a2-d4e78dfbc3ab",
"relationship--e214ad40-d338-52ac-8790-29672a0a728e",
"relationship--ce5dd3f6-4fef-56eb-8d51-7b10ab420404",
"relationship--539f8726-80da-5dd9-bff8-4ec1b07712af",
"relationship--80bb377d-3359-56a6-bd3d-86e603cbc6d9",
"relationship--19eb6c35-22cc-594f-907e-4fb703280bd4",
"relationship--712b1494-aa2d-5d92-8de5-ff8b691885dc",
"relationship--882fadf4-34a0-5916-9c2c-a25ecf5d7bed",
"relationship--9f5c2649-3c29-5070-8169-d3682707f832",
"relationship--8df3cf45-2f8f-59f9-bad7-906c3b16b4da",
"relationship--501f0e04-2b75-54af-975d-b91a66efce1d",
"relationship--ba839399-06d8-5528-971d-16e659aa2c43",
"relationship--15de8060-6b47-5e1e-a159-b1bafad2614a",
"relationship--c3442ec9-5cad-5ec6-8807-040767d398c9",
"relationship--1048896d-8dbe-5e12-89a8-0e06b40c229e",
"relationship--99884dce-a396-54bb-a799-9ee3bfbecb62",
"relationship--d506f994-427a-5ade-9d03-271fb73409b2",
"relationship--674ac15d-475a-5b5c-bc4f-eacf5be0de59",
"relationship--cdf52e55-47cb-558e-ad70-04726709df73",
"relationship--c345a9b8-2579-5a7b-96b5-58a458fbdc74",
"relationship--b42114e5-716d-593b-b742-6db81e86b2aa",
"relationship--4f37d2e4-68ca-52c0-bd9f-d7a7583118ff",
"relationship--07c59bbc-7bdc-5314-a02d-854a3faa45f8",
"relationship--cfd17763-f9d6-5b6c-8558-8aa1c85791ce",
"relationship--49a60a1e-773a-5ef9-b3c2-1aad2c1e5b8f",
"relationship--966b615c-4687-5333-8b9b-20565d2b1ade",
"relationship--11fc332a-9c5f-595b-a403-91453c6eded5",
"relationship--a54cb2f1-9dde-5b6b-8fb2-b418850becf7",
"relationship--334cf415-4187-5038-a9e4-67c831e54aa8",
"relationship--56779263-1a95-5128-a9a7-0699099901b8",
"relationship--df64a039-78db-5c79-8c50-cd8869135b64",
"relationship--aab6be8d-0fd2-51a5-9625-b8c5e05f888a",
"relationship--641ec06e-020f-5d5f-9d92-8d716dff6574",
"relationship--9d2ab490-a5ea-5ea8-b2bc-5d346b690965",
"relationship--ab9cef44-74e1-5540-8768-cd79bc296567",
"relationship--45fab04a-4776-538d-8e00-430d7d0a3d8c",
"relationship--61cbb94e-489d-5dcb-8272-d3acec1b2940",
"relationship--4bb8287e-0d84-56b2-8010-53194f0c5941",
"relationship--4d8430c4-3eeb-5f47-93e2-909b4148b525",
"relationship--9f40b910-1e24-51c6-b39d-af6beed02947",
"relationship--73dc9a22-f041-546b-bf7a-1055e8b5ab13",
"relationship--a32c20d8-94bb-51a7-aa62-52b8fe2bb233",
"relationship--b38538cc-475e-5c2e-843d-610919ea3e5a",
"relationship--5060a6b3-e592-5368-bf0d-319e52457923",
"relationship--1cbdf032-8fd2-5025-b0f5-7a651a83dec8",
"relationship--097d8751-fd31-53e2-866f-9ad513313739",
"relationship--565e6c69-c812-55ed-9a8b-e6f94ef41663",
"relationship--733b67b1-fcf1-5f84-88e5-4198a9f6f2e9",
"relationship--c7dcd53a-f73a-5dca-8bb5-cf4c5db47ea2",
"relationship--2cddad85-848d-5b8b-9507-ab43aebcec31",
"relationship--e0332396-1fa9-5094-a036-b9ad1b9d03be",
"relationship--5b5a7b77-972a-5c48-97ed-378cacaa1542",
"relationship--719d75b5-a0f8-5111-b029-a4f95bf4846a",
"relationship--3cd2b73b-3269-5dab-8ea8-ebae823f5421",
"relationship--67f1a789-c0fa-5a5a-b1f3-6e87aa89c0b0",
"relationship--2cc19abc-299d-5875-a641-bb9d0a881f90",
"relationship--3887ca5e-ba70-59cd-bdd1-37ba5be6e157",
"relationship--f44836a9-087a-540b-b09e-74b735b76f53",
"relationship--f219b321-550c-5169-897d-a2f3e527582e",
"relationship--465939ba-147f-5844-93f7-de72fcd99d38",
"relationship--439ee472-c5cb-5a40-9bd3-3259287e0581",
"relationship--7711d386-9f24-592f-b6c4-45954a1f6d1e",
"relationship--93d3d1bf-7d42-5563-8233-6303d9805e69",
"relationship--d728269c-f53d-5f79-9a0f-fb983a7abda9",
"relationship--dec88182-39a5-5470-8508-bf6bf5c30b96",
"relationship--221a5ff4-61ff-51bc-97a3-bcade2f4dc2a",
"relationship--fc8dad83-81d6-520d-944d-38c16246bc50",
"relationship--ef616094-0daa-5981-a038-9d1f89e0f56c",
"relationship--7f2d35cb-7799-5e00-894f-22662775ef8c",
"relationship--9cfdbd78-8f49-550d-a488-d71cad9cd24b",
"relationship--bed72f6a-83f5-5ad6-8bc8-28460f765b38",
"relationship--bee83451-98df-5030-ac34-3d4cf2a7a824",
"relationship--9f6a04e8-73a8-5ec9-b973-a342fe0fde31",
"relationship--8ddf7e44-39a0-5d8a-b94b-e7f48a2dc9ed",
"relationship--b3817e74-8c66-5ecf-ae7e-007b49a203ba",
"relationship--60d206a8-b53c-552c-84c8-da56b5e796b5",
"relationship--7d6865bc-c623-567f-b6c6-5d0256651076",
"relationship--47401e6a-ec28-5ae3-9a9c-235ff6f7334c",
"relationship--3433e847-387f-5f73-bf75-71bdc20e066c",
"relationship--99d28f3b-ff02-587e-8411-59e526fe9b03",
"relationship--02c3ee8b-957b-5320-b4f3-4b55cc7a1d68",
"relationship--0a525de7-b87f-5afb-9465-d472fe40d812",
"relationship--80726728-e2cb-58f8-9fd5-d269a94e7584",
"relationship--90d5b21a-c3f7-5cb4-83f0-224ec8e3cec4",
"relationship--b02b3869-d51a-5052-a95d-e020260cb8f1",
"relationship--e7f11364-da80-51dd-bbf0-c081c24cf0c2",
"relationship--a3a2346b-f070-5305-b9d6-ea2776a610a2",
"relationship--a2347ea7-8682-5b39-93ec-62032dd27fdf",
"relationship--590b317d-c86d-57c5-a534-7546251e4c94",
"relationship--e6370c75-8d7e-5ef1-8eaf-5f24cf6e5511",
"relationship--96067b05-d293-5f38-85f7-8e58ea83c02c",
"relationship--718ef285-ec9b-5140-979d-3a947620fe1f",
"relationship--f95249e6-fe99-5635-b55f-8e53b3b4fabf",
"relationship--ff312000-e0b1-505c-894d-32258eb755ea",
"relationship--56ce2d21-70a7-5c1b-9d5c-1600fa8d39ce",
"relationship--2b678ce6-1996-54aa-aa1e-44474d6021ed",
"relationship--d2936388-097a-501e-8389-aa4143722e55",
"relationship--498861ca-d014-5c79-a1d8-b8bfe55695f5",
"relationship--94b21481-4126-555e-8f48-40a377badf2d",
"relationship--8a2a3b9a-1a90-5a51-9652-db62c32e2c30",
"relationship--3d370cb3-8bec-52d7-952d-f3d0fce6116d",
"relationship--6f629277-54b4-5285-815f-866191b8e7b7",
"relationship--d36a7a47-ee4a-556d-8b24-9fbefae84c87",
"relationship--7a272d72-68bd-585b-b909-3b86a5df323e",
"relationship--00857f13-52f6-5b13-8206-063abf86d37e",
"relationship--1b22e8b8-e2ad-56c5-9eba-81f9d896b96d",
"relationship--48f75846-1c4a-5768-9e41-fd5a3ace4cc3",
"relationship--1cdfc8c9-ef02-5bc4-bcb0-099cb1b2d1aa",
"relationship--9003cb11-864d-5889-871f-b9a03d132beb",
"relationship--61e66647-c586-5f30-85a3-0e1600afa8a2",
"relationship--708155ce-578e-5aa4-843c-bb591d148888",
"relationship--9b073690-42f8-5c1d-ac91-62f57c82fc88",
"relationship--3b65a5f6-6ac5-527f-b3db-a3b41a7966da",
"relationship--a6895cde-8837-5292-8893-5181324715cf",
"relationship--25b93f99-2074-5763-84e9-61c29303d1aa",
"relationship--85683ef8-2f93-5cdb-8238-0ca8ae4dc605",
"relationship--9d1d5c55-1d20-513e-ae56-67f6073ed171",
"relationship--5caa7dec-84e4-52c0-8808-08e3fb21ae8b",
"relationship--d4d2196a-dc03-5dea-a9c4-ba264ce5c650",
"relationship--f6dd571f-2c13-5277-a8b7-2de49b50914f",
"relationship--177e2266-3746-5061-9e44-4fddda9d7445",
"relationship--7c51def8-ddfb-5fc2-82ad-ccba279460c1",
"relationship--bb167a80-937a-5729-b4c5-f6ad1c6d0388",
"relationship--0104b126-a76d-5f0c-bf93-1c62ea901f00",
"relationship--93cd3a58-c5aa-51d4-aa00-75f0257767d2",
"relationship--123c0a03-f8da-5ec0-8282-dc68d65f60a5",
"relationship--272e6862-400c-53e9-9b78-202d7e71ce9b",
"relationship--debfdd3c-cabc-57cd-9f40-416bd997f1ae",
"relationship--97d8c3dc-0096-5424-a991-ae18cb1c5019",
"relationship--10558ab0-44cd-50c7-a330-9a4ff4111b52",
"relationship--d5c05632-d347-520e-94da-97489d054b5c",
"relationship--8b9c8e02-5cce-5293-9f78-ade46b24c41b",
"relationship--620dabbf-e920-5773-8b79-529273a16277",
"relationship--9de04fd3-8fbb-5045-a36d-aaacee947903",
"relationship--2dfb59e1-778e-5c37-a1ca-a4a75930fc4c",
"relationship--dcd2e7a7-287d-550a-b2b3-000f3453afa6",
"relationship--5cfa26e6-d446-5265-9654-b4bc4f03e5f1",
"relationship--132d8ee2-8256-50e3-b4fa-adbbe89be32a",
"relationship--8b0cb42f-84b2-5190-9669-2e067466274d",
"relationship--c4cf1a1c-0e9c-5905-b3a7-84b8f3f7b4f8",
"relationship--544e913e-627b-532d-b1c4-b5960ec407fe",
"relationship--bfd384d5-3a9d-5b07-8c12-5340a42dbfdb",
"relationship--d6f41342-f1d0-5aa3-8f84-efa8550b0b7b",
"relationship--07b21bb7-9ab3-579c-9f8f-88eaaf75f575",
"relationship--81ed9a9c-519d-5a84-bed7-80d95d28fe72",
"relationship--487eb37f-ad01-516d-a945-a14f485a76b7",
"relationship--4576ee59-b630-503e-b795-3c8e8452a73b",
"relationship--05d63a8b-8f1c-57a5-8417-792d1ce97c37",
"relationship--fb0ddf1e-cae2-5e50-88ff-cbecafdf0e3a",
"relationship--ceaeab9b-c1a5-5d08-a7e6-5fb7bd9a8406",
"relationship--7b72f3a6-f315-516c-96a5-7b854171c626",
"relationship--0c5be3f9-d650-5fa2-82a0-eccb6101baa3",
"relationship--ed802492-0502-5606-8907-58c66d6e48ac",
"relationship--03329326-f625-5353-98f2-50f9fd545f04"
],
"labels": [
"Stealer",
"MaaS",
"Builder",
"Brazil"
],
"external_references": [
{
"source_name": "The Hunters Ledger",
"url": "https://the-hunters-ledger.com/reports/evilsoul-engine-stealer-maas-144-172-103-98/"
}
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
}
]
}