{ "type": "bundle", "id": "bundle--cb0b7ec2-b737-4984-8e4b-4c45e18c4970", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.351794Z", "modified": "2026-06-16T16:00:55.351794Z", "name": "The Hunters Ledger", "identity_class": "organization" }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } }, { "type": "ipv4-addr", "spec_version": "2.1", "id": "ipv4-addr--7f6daaa1-cf23-5900-8670-4f3d89e74332", "value": "77.110.96.200" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--31de5704-b9f1-5a38-af29-a1d3c16f093c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.35206Z", "modified": "2026-06-16T16:00:55.35206Z", "name": "ipv4: 77.110.96.200", "indicator_types": [ "malicious-activity" ], "pattern": "[ipv4-addr:value = '77.110.96.200']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "ipv4-addr", "spec_version": "2.1", "id": "ipv4-addr--01667cb8-3c97-5586-8e24-d27194d922d8", "value": "77.110.125.145" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--25c06a59-d267-5c27-92e7-73c12559f225", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.352778Z", "modified": "2026-06-16T16:00:55.352778Z", "name": "ipv4: 77.110.125.145", "indicator_types": [ "malicious-activity" ], "pattern": "[ipv4-addr:value = '77.110.125.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--710664e2-c100-579c-92b0-7d120ff87ba7", "value": "http://77.110.96.200/libpam_cache.so" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--da981557-2e76-5cd5-8b5d-2bd5321fa1cc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.353415Z", "modified": "2026-06-16T16:00:55.353415Z", "name": "url: http://77.110.96.200/libpam_cache.so", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/libpam_cache.so']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--fb08fc1b-bf12-5815-9f7c-acacad2e6b6d", "value": "http://77.110.96.200/libpam_cache.c" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5f5b0e7e-a2e8-55be-b77c-86662db1b49e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.353981Z", "modified": "2026-06-16T16:00:55.353981Z", "name": "url: http://77.110.96.200/libpam_cache.c", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/libpam_cache.c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--38223062-c1b6-5c69-938f-92b01becee18", "value": "http://77.110.96.200/ghost.sh" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b821c58f-d17a-584d-ab7c-9660f78c3c73", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.35458Z", "modified": "2026-06-16T16:00:55.35458Z", "name": "url: http://77.110.96.200/ghost.sh", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/ghost.sh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--37c09452-19ee-53ee-b8bc-dc1145aa5e9c", "value": "http://77.110.96.200/hyst.sh" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--535731ea-77f8-59b0-b15c-63019ff12479", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.355183Z", "modified": "2026-06-16T16:00:55.355183Z", "name": "url: http://77.110.96.200/hyst.sh", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/hyst.sh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--b131345f-7f2f-5629-84a3-138177737c64", "value": "http://77.110.96.200/min1.sh" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0a40092b-291d-5d74-9d5c-c9b9e23e083e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.355643Z", "modified": "2026-06-16T16:00:55.355643Z", "name": "url: http://77.110.96.200/min1.sh", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/min1.sh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--641cf062-6586-5e27-adee-ae9e5b174696", "value": "http://77.110.96.200/xmr.gz" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3924a79f-39ad-51dd-b8e2-43ac4f8ee54c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.356095Z", "modified": "2026-06-16T16:00:55.356095Z", "name": "url: http://77.110.96.200/xmr.gz", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/xmr.gz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--b1907458-d5db-593f-bdde-3c899a809ed5", "value": "http://77.110.96.200/lmm.gz" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2942f30a-88a9-5385-8e95-065c37786c43", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.356519Z", "modified": "2026-06-16T16:00:55.356519Z", "name": "url: http://77.110.96.200/lmm.gz", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/lmm.gz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--f385c410-27a7-53ae-b673-1b92031d9d9a", "value": "http://77.110.96.200:3301/api/stats" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a75c5beb-93b4-504f-b0cb-ba40949b8932", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.35694Z", "modified": "2026-06-16T16:00:55.35694Z", "name": "url: http://77.110.96.200:3301/api/stats", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200:3301/api/stats']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "url", "spec_version": "2.1", "id": "url--9e8596d0-361b-599c-9bbc-458c3773557e", "value": "http://77.110.96.200:3301/api/login" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--63081f19-a1d6-5053-a4b2-c426db9e40fb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.357357Z", "modified": "2026-06-16T16:00:55.357357Z", "name": "url: http://77.110.96.200:3301/api/login", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200:3301/api/login']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "url", "spec_version": "2.1", "id": "url--4acee241-266a-50cc-9d29-0e06d15a1c33", "value": "http://77.110.96.200:3301/api/vpn_report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e24d7444-2d05-5cd9-b339-d3c1e963dcef", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.357811Z", "modified": "2026-06-16T16:00:55.357811Z", "name": "url: http://77.110.96.200:3301/api/vpn_report", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200:3301/api/vpn_report']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "url", "spec_version": "2.1", "id": "url--2a3bd9ca-4e0b-5468-a083-31229ebc07d5", "value": "http://77.110.125.145/libpam_cache.so" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f53751be-9c3c-5867-82e8-1940fb262b2e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.358244Z", "modified": "2026-06-16T16:00:55.358244Z", "name": "url: http://77.110.125.145/libpam_cache.so", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.125.145/libpam_cache.so']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--5ce4450b-b005-5587-85a6-c9a7574f14d4", "value": "http://77.110.125.145/ghost.sh" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e2ad61c2-820a-5176-9fe0-7dfe67f6b6e8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.358661Z", "modified": "2026-06-16T16:00:55.358661Z", "name": "url: http://77.110.125.145/ghost.sh", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.125.145/ghost.sh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--aae4b515-0ce3-5820-84f2-f4e1c6bef4e4", "value": "https://github.com/Vova75Rus/ComfyUI-Shell-Executor" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--945c4ea1-5c16-55c9-a98c-dee7d2dfb993", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.359104Z", "modified": "2026-06-16T16:00:55.359104Z", "name": "url: https://github.com/Vova75Rus/ComfyUI-Shell-Executor", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://github.com/Vova75Rus/ComfyUI-Shell-Executor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--b15e151a-3c62-58d4-9ec8-4a8588c577bc", "value": "https://github.com/jamestechdev-oss/ComfyUI-Shell-Plugin" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3465630b-25cc-50fa-a9a4-bb1e2b64aa0a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.359537Z", "modified": "2026-06-16T16:00:55.359537Z", "name": "url: https://github.com/jamestechdev-oss/ComfyUI-Shell-Plugin", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://github.com/jamestechdev-oss/ComfyUI-Shell-Plugin']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--7b8c1702-71ea-5555-a9f7-5eee08bbf2c5", "value": "https://github.com/Vova75Rus/miner" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5e0a3104-cc85-5091-9437-f5795d2171b1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.360116Z", "modified": "2026-06-16T16:00:55.360116Z", "name": "url: https://github.com/Vova75Rus/miner", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://github.com/Vova75Rus/miner']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--4170286d-e8df-54f7-b26b-2f3fd4c5313d", "value": "https://github.com/Vova75Rus/legendary-carnival" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fd9b3cb2-de6e-5d1c-aec2-f8bd892dda95", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.360808Z", "modified": "2026-06-16T16:00:55.360808Z", "name": "url: https://github.com/Vova75Rus/legendary-carnival", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://github.com/Vova75Rus/legendary-carnival']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--ab9e7e34-9ca1-50c7-8617-b08ee5919040", "value": "https://github.com/Vova75Rus/Dim" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--861ba2a9-51e3-5eaa-b24c-6466bdc41ba9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.361467Z", "modified": "2026-06-16T16:00:55.361467Z", "name": "url: https://github.com/Vova75Rus/Dim", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://github.com/Vova75Rus/Dim']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--38324a9f-4ac7-5c84-95ec-361a4498a520", "value": "https://github.com/Vova75Rus/Notes.github.io" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--44cedbec-2e5d-5a2b-9083-7412f44334e6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.362255Z", "modified": "2026-06-16T16:00:55.362255Z", "name": "url: https://github.com/Vova75Rus/Notes.github.io", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://github.com/Vova75Rus/Notes.github.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--e7840786-a916-5c8a-8589-f22ec7832462", "value": "xmr.kryptex.network" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3b717480-1786-5beb-ab11-5c180da3de1d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.362767Z", "modified": "2026-06-16T16:00:55.362767Z", "name": "domain: xmr.kryptex.network", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'xmr.kryptex.network']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--de3fa8dc-f23c-50c3-b544-0490ba3b86d4", "value": "etc.kryptex.network" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f45acd05-fede-5fa5-94ac-1cd78a421f2f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.363254Z", "modified": "2026-06-16T16:00:55.363254Z", "name": "domain: etc.kryptex.network", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'etc.kryptex.network']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--efa8dec6-16fc-5a4c-b899-a9661108b910", "value": "cfx.kryptex.network" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ed1a4e8c-f8a4-5f4b-9385-23fe8ac3cf03", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.363685Z", "modified": "2026-06-16T16:00:55.363685Z", "name": "domain: cfx.kryptex.network", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'cfx.kryptex.network']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--73087b89-df73-57b6-8b83-19d276c39d28", "value": "auto.c3pool.org" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4ba05cb5-2063-59d1-8c76-2a9f0848f359", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.364104Z", "modified": "2026-06-16T16:00:55.364104Z", "name": "domain: auto.c3pool.org", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'auto.c3pool.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--f59c038d-17eb-5db9-a047-536271a7f8cc", "value": "cfx-asia1.nanopool.org" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c15d88ec-6a0d-5f85-bd50-d10c77034938", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.364526Z", "modified": "2026-06-16T16:00:55.364526Z", "name": "domain: cfx-asia1.nanopool.org", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'cfx-asia1.nanopool.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--5324675a-95fe-57ae-8d68-92d935706860", "value": "bing.com" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a978e77e-35c9-576d-8d1e-1b7aba19eadb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.364959Z", "modified": "2026-06-16T16:00:55.364959Z", "name": "domain: bing.com", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'bing.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 60, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 60 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--599c408e-c4d7-5666-bb98-73a1064b0072", "value": "icanhazip.com" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--037e9e3d-33d6-57f8-8bd9-5b090cda4228", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.365414Z", "modified": "2026-06-16T16:00:55.365414Z", "name": "domain: icanhazip.com", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'icanhazip.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 40, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 40 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--30251869-4ef6-5d4b-9c03-9105e254850f", "value": "ifconfig.me" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3ed50382-45c7-52b0-81e0-a540fa4f7a77", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.365907Z", "modified": "2026-06-16T16:00:55.365907Z", "name": "domain: ifconfig.me", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'ifconfig.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 40, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 40 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--02144e04-ed1d-5db8-bf2c-a8a02deced9e", "value": "ip.sb" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--37baa463-4490-5942-858f-af4e9a013dbd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.366546Z", "modified": "2026-06-16T16:00:55.366546Z", "name": "domain: ip.sb", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'ip.sb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 40, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 40 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--4e57536f-d092-56e5-8063-c68b54fc8340", "value": "get.hy2.sh" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e1ed5be4-63e1-5abe-bc83-1c52bc8772dc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.367126Z", "modified": "2026-06-16T16:00:55.367126Z", "name": "domain: get.hy2.sh", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'get.hy2.sh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 60, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 60 }, { "type": "file", "spec_version": "2.1", "id": "file--49b1373f-d0d7-5e0d-b693-d306200931b4", "hashes": { "SHA-256": "eaaa10c840de23335abae1a9ead0a6a7fb7be5187cd19ad05137feab12bb7301" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--be07cd65-95b6-5ca4-8279-d70ba1dd7dad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.367678Z", "modified": "2026-06-16T16:00:55.367678Z", "name": "sha256: eaaa10c840de23335abae1a9ead0a6a7fb7be5187cd19ad05137feab12bb7301", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = 'eaaa10c840de23335abae1a9ead0a6a7fb7be5187cd19ad05137feab12bb7301']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--abfe340a-6db0-5e91-8192-b6b28dc7a151", "hashes": { "SHA-256": "edafde0d33ff1a169c0c4eeaeec12d1759818c7cf4950fcee91c687e811e6cff" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6d1bc44e-fe7e-5313-9aae-cffcd26c0997", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.368271Z", "modified": "2026-06-16T16:00:55.368271Z", "name": "sha256: edafde0d33ff1a169c0c4eeaeec12d1759818c7cf4950fcee91c687e811e6cff", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = 'edafde0d33ff1a169c0c4eeaeec12d1759818c7cf4950fcee91c687e811e6cff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--e9a30230-8d34-538d-99b3-36dcb416f146", "hashes": { "SHA-256": "e943b58112f58517b95424dba9334bf97c5dc2dd2f069dca04b9e75b9fec56ba" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3dfaa4d5-4638-5546-9b78-e5e5a0f551b4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.368834Z", "modified": "2026-06-16T16:00:55.368834Z", "name": "sha256: e943b58112f58517b95424dba9334bf97c5dc2dd2f069dca04b9e75b9fec56ba", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = 'e943b58112f58517b95424dba9334bf97c5dc2dd2f069dca04b9e75b9fec56ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--83333950-4b98-5d26-9a67-44f8e641e1e1", "hashes": { "SHA-256": "822afb1fb29f22df8c951726d492021df2940223ed719881dafb40cda3894c5c" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--876ea16b-5804-5690-85ee-684bad2f221e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.369375Z", "modified": "2026-06-16T16:00:55.369375Z", "name": "sha256: 822afb1fb29f22df8c951726d492021df2940223ed719881dafb40cda3894c5c", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = '822afb1fb29f22df8c951726d492021df2940223ed719881dafb40cda3894c5c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--52c73e5e-98c8-5ea5-beb4-bfbde3847c21", "hashes": { "SHA-256": "008bc5ab73e75bb76131f91d68a3792d9e4393137c14afe8c44d44be2a2c46f6" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f1cd66d6-553a-5791-a654-204dd2e3a85b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.369894Z", "modified": "2026-06-16T16:00:55.369894Z", "name": "sha256: 008bc5ab73e75bb76131f91d68a3792d9e4393137c14afe8c44d44be2a2c46f6", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = '008bc5ab73e75bb76131f91d68a3792d9e4393137c14afe8c44d44be2a2c46f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--3f3f0d01-7638-511e-bfc0-334e1600087f", "hashes": { "SHA-256": "dc232b55329d95fe2a47a8d637b7bffea06f18e3d8332ba94b042b1862213a1d" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6e1517d0-ebed-56bf-ab6a-dbb1dc8a8021", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.370633Z", "modified": "2026-06-16T16:00:55.370633Z", "name": "sha256: dc232b55329d95fe2a47a8d637b7bffea06f18e3d8332ba94b042b1862213a1d", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = 'dc232b55329d95fe2a47a8d637b7bffea06f18e3d8332ba94b042b1862213a1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--d69636b5-9b6c-578f-8be2-698aaeacfca3", "hashes": { "SHA-256": "9023734a70ee6a05d4ecd5466d0c5803f293601836deb00cc417a3add04bd93e" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--616d755d-07d1-53b4-9af7-ceff7dff37e7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.371169Z", "modified": "2026-06-16T16:00:55.371169Z", "name": "sha256: 9023734a70ee6a05d4ecd5466d0c5803f293601836deb00cc417a3add04bd93e", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = '9023734a70ee6a05d4ecd5466d0c5803f293601836deb00cc417a3add04bd93e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--1a81de11-5521-5e95-be17-94ff0c5329eb", "hashes": { "SHA-256": "6e5d897c7fd0060c7da2394ad1bb3584827c216f8aadac4f6ed41b2d915f0070" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0b2abd83-408d-5507-b85e-bbffaaa202e7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.372132Z", "modified": "2026-06-16T16:00:55.372132Z", "name": "MAL_Linux_GHOST_libpam_cache_Rootkit_Family", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_libpam_cache_Rootkit_Family {\n meta:\n description = \"Detects GHOST cryptojacker kit LD_PRELOAD rootkit libpam_cache.so \u2014 ELF64 shared object hooking readdir/readdir64/fopen/fopen64 to hide miner processes, kit paths, and operator wallet prefixes from /proc listings; byte-identical across all known GHOST kit customer deployments\"\n license = \"CC BY-NC 4.0 - https://creativecommons.org/licenses/by-nc/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n hash1 = \"eaaa10c840de23335abae1a9ead0a6a7fb7be5187cd19ad05137feab12bb7301\"\n hash2 = \"edafde0d33ff1a169c0c4eeaeec12d1759818c7cf4950fcee91c687e811e6cff\"\n hash3 = \"296a800564111b0bad9fe63faf4e63ba\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"LD_PRELOAD Rootkit\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"ca987dcd-ca0e-5e71-a3b1-cab19fd7a851\"\n strings:\n // Hook function exports \u2014 the four libc symbols this .so overrides\n $export_readdir = \"readdir\" ascii fullword\n $export_fopen = \"fopen\" ascii fullword\n // GHOST-specific hide-list strings from H[] array \u2014 operator-deployment-path artifacts\n $hide_khugepaged = \"khugepaged_\" ascii\n $hide_nv_uvm = \"nv_uvm_\" ascii\n $hide_inotify = \"inotify_guard\" ascii fullword\n $hide_libpam_self = \"libpam_cache\" ascii\n $hide_fontcpu = \"fontconfig/.cpu\" ascii\n $hide_fontgpu = \"fontconfig/.gpu\" ascii\n $hide_pid_guard = \".pid_guard\" ascii\n $hide_ghost_sh = \"ghost.sh\" ascii fullword\n // LD_PRELOAD removal constructor \u2014 unsetenv called at load time\n $unsetenv_preload = \"LD_PRELOAD\" ascii fullword\n // Port-filter format string \u2014 uppercase hex zero-padded matching /proc/net/tcp native format\n $port_fmt = \":%04X\" ascii\n // /proc hooking targets\n $proc_net_tcp = \"/proc/net/tcp\" ascii\n $proc_cmdline = \"/proc/%s/cmdline\" ascii\n $proc_exe = \"/proc/%s/exe\" ascii\n // ELF magic bytes for shared object detection (7f 45 4c 46 = ELF magic)\n $elf_magic = { 7F 45 4C 46 02 01 01 00 }\n condition:\n // ELF64 shared object (magic + ELFCLASS64 + ELFDATA2LSB)\n $elf_magic at 0 and\n // File size: 14,568 bytes exact for known sample; allow up to 50KB for compiled variants\n filesize < 50KB and\n // Require hook exports + multiple hide-list strings + port format string + proc hooks\n ($export_readdir and $export_fopen) and\n $port_fmt and\n ($proc_net_tcp or $proc_cmdline) and\n ($unsetenv_preload) and\n 3 of ($hide_*)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--346e9bdf-0129-5bc8-9ecc-27f99e556375", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.372337Z", "modified": "2026-06-16T16:00:55.372337Z", "name": "MAL_Linux_GHOST_libpam_cache_Source", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_libpam_cache_Source {\n meta:\n description = \"Detects GHOST cryptojacker kit LD_PRELOAD rootkit C source file libpam_cache.c \u2014 98-line dense hand-written C with single-char identifiers, RTLD_NEXT hook resolution, unsetenv LD_PRELOAD constructor, and GHOST-specific hide-list contents; shipped alongside compiled .so on kit-author distribution server\"\n license = \"CC BY-NC 4.0 - https://creativecommons.org/licenses/by-nc/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n hash1 = \"edafde0d33ff1a169c0c4eeaeec12d1759818c7cf4950fcee91c687e811e6cff\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"LD_PRELOAD Rootkit Source\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"9f7d2a2c-c893-5f7f-a3c0-ab6fac644947\"\n strings:\n // GNU source define enabling RTLD_NEXT\n $gnu_source = \"#define _GNU_SOURCE\" ascii\n // RTLD_NEXT hook resolution pattern\n $rtld_next = \"RTLD_NEXT\" ascii fullword\n // Constructor pattern \u2014 unsetenv called with LD_PRELOAD at constructor time\n $constructor_attr = \"__attribute__((constructor))\" ascii\n $unsetenv_call = \"unsetenv(\\\"LD_PRELOAD\\\")\" ascii\n // Hook function identifiers (dense single-char style from this author's code)\n $helper_sh = \"static int _sh(\" ascii\n $helper_ph = \"static int _ph(\" ascii\n $helper_fn = \"static FILE *_fn(\" ascii\n // GHOST-specific hide-list entries in the H[] array\n $hide_inotify = \"inotify_guard\" ascii fullword\n $hide_khugepaged = \"khugepaged_\" ascii\n $hide_ghost = \"ghost.sh\" ascii fullword\n // Port filter format string\n $port_fmt = \":%04X\" ascii\n condition:\n // No ELF magic \u2014 this is C source text\n filesize < 10KB and\n $gnu_source and\n $rtld_next and\n $constructor_attr and\n $unsetenv_call and\n 2 of ($helper_*) and\n 2 of ($hide_*)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cca2fb59-54ea-5f41-b885-b4da230895bd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.372516Z", "modified": "2026-06-16T16:00:55.372516Z", "name": "MAL_Linux_GHOST_Kit_Shell_Installer", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_Kit_Shell_Installer {\n meta:\n description = \"Detects GHOST cryptojacker kit primary Bash installer ghost.sh \u2014 1338-line English-language Bash script containing GHOST v5.1/v6.0 codename banner, competitor-displacement function _anti_hisana, 4 container-escape variants, LD_PRELOAD rootkit build/install functions, and multi-vector persistence; function names unique to GHOST kit family\"\n license = \"CC BY-NC 4.0 - https://creativecommons.org/licenses/by-nc/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n hash1 = \"e943b58112f58517b95424dba9334bf97c5dc2dd2f069dca04b9e75b9fec56ba\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"Bash Installer/Orchestrator\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"e3af0826-0aba-54ee-90ae-f49c95fb66ba\"\n strings:\n // GHOST kit version banners (in first-line comment of ghost.sh)\n $banner_v51 = \"GHOST v5.1\" ascii\n $banner_v60 = \"GHOST v6.0\" ascii\n // Competitor-displacement function \u2014 kills Hisana kit (16 cross-host hits confirmed in Hunt.io)\n $fn_anti_hisana = \"_anti_hisana\" ascii fullword\n // Rootkit build/install functions\n $fn_compile_so = \"_compile_hide_so\" ascii fullword\n $fn_install_preload = \"_install_preload\" ascii fullword\n // Container-escape suite \u2014 all 4 variants\n $fn_container_esc = \"_container_escape\" ascii fullword\n $fn_esc_cgroup = \"_escape_via_cgroup\" ascii fullword\n $fn_esc_mount = \"_escape_via_mount\" ascii fullword\n $fn_esc_nsenter = \"_escape_via_nsenter\" ascii fullword\n $fn_esc_socket = \"_escape_via_socket\" ascii fullword\n // Python kit builder function\n $fn_build_py = \"_build_python_fetcher\" ascii fullword\n // Resurrection watchdog function\n $fn_resurrection = \"_resurrection_loop\" ascii fullword\n condition:\n filesize < 200KB and\n ($banner_v51 or $banner_v60) and\n $fn_anti_hisana and\n $fn_compile_so and\n ($fn_container_esc or ($fn_esc_cgroup and $fn_esc_mount)) and\n ($fn_build_py or $fn_resurrection)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f4470d02-406f-5e86-8aad-0afb255bc3ad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.372699Z", "modified": "2026-06-16T16:00:55.372699Z", "name": "MAL_Linux_GHOST_Hysteria_Operator_Wrapper", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_Hysteria_Operator_Wrapper {\n meta:\n description = \"Detects GHOST cryptojacker kit Hysteria v2 operator wrapper hyst.sh \u2014 Russian-language Bash script installing Hysteria v2 QUIC/UDP backdoor with bing.com SNI masquerade, per-victim TLS cert generation, /tmp/.hy2_* credential cache, and HTTP admin panel callback to :3301; operator-authored component of GHOST kit\"\n license = \"CC BY-NC 4.0 - https://creativecommons.org/licenses/by-nc/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n hash1 = \"822afb1fb29f22df8c951726d492021df2940223ed719881dafb40cda3894c5c\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"Hysteria v2 Installer Wrapper\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"13a9762c-4653-5feb-8227-fc15eea54a4a\"\n strings:\n // Hysteria v2 bing.com SNI masquerade \u2014 distinctive covert configuration\n $sni_masquerade = \"bing.com\" ascii fullword\n // Hysteria credential cache file pattern in /tmp\n $hy2_password = \".hy2_password\" ascii\n $hy2_port = \".hy2_port\" ascii\n $hy2_uri = \".hy2_uri\" ascii\n // Admin panel port reference (3301 = Hysteria panel)\n $panel_port = \"3301\" ascii\n // Hysteria installer download source\n $hy2_installer = \"get.hy2.sh\" ascii\n // Russian operator comments (Cyrillic \u2014 confirming operator-authored)\n $ru_installs = \"\\xD0\\x9D\\xD0\\x90\\xD0\\xA1\\xD0\\xA2\\xD0\\xA0\\xD0\\x99\\xD0\\x9A\\xD0\\x98\" ascii // \u041d\u0410\u0421\u0422\u0420\u041e\u0419\u041a\u0418\n // Operator panel API callback function name\n $api_vpn_report = \"api_vpn_report\" ascii fullword\n condition:\n filesize < 30KB and\n $sni_masquerade and\n 2 of ($hy2_*) and\n ($panel_port or $hy2_installer or $api_vpn_report)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4d021958-4d7d-5ffe-8031-6ebb99e5279e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.372849Z", "modified": "2026-06-16T16:00:55.372849Z", "name": "MAL_Linux_GHOST_min1_DualTelegram_Wrapper", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_min1_DualTelegram_Wrapper {\n meta:\n description = \"Detects GHOST cryptojacker kit miner installer wrapper min1.sh \u2014 Russian-language Bash script with dual-Telegram OWNER/MIRROR architecture baked in; kit-author OWNER bot token prefix 8415540095 is baked into every GHOST customer deployment globally; catches all GHOST kit operators via single string match\"\n license = \"CC BY-NC 4.0 - https://creativecommons.org/licenses/by-nc/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n hash1 = \"008bc5ab73e75bb76131f91d68a3792d9e4393137c14afe8c44d44be2a2c46f6\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"Miner Installer / Dual-Telegram Supply-Chain Wrapper\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"8dc8ca76-896a-58b9-b88c-4ab6cf8c7e6c\"\n strings:\n // GHOST kit OWNER bot token prefix \u2014 baked into every customer deployment by kit author\n // HIGHEST-VALUE SUPPLY-CHAIN DETECTION STRING\n $owner_bot_prefix = \"8415540095:\" ascii\n // Dual-Telegram architecture comment strings (Russian: \u0412\u041b\u0410\u0414\u0415\u041b\u0415\u0426 = OWNER, \u0417\u0415\u0420\u041a\u0410\u041b\u041e = MIRROR)\n $tg_owner_comment = \"TELEGRAM (\\xD0\\x92\\xD0\\x9B\\xD0\\x90\\xD0\\x94\\xD0\\x95\\xD0\\x9B\\xD0\\x95\\xD0\\xA6)\" ascii // TELEGRAM (\u0412\u041b\u0410\u0414\u0415\u041b\u0415\u0426)\n $tg_mirror_comment = \"TELEGRAM (\\xD0\\x97\\xD0\\x95\\xD0\\xA0\\xD0\\x9A\\xD0\\x90\\xD0\\x9B\\xD0\\x9E)\" ascii // TELEGRAM (\u0417\u0415\u0420\u041a\u0410\u041b\u041e)\n // Kryptex mining pool domains (min1.sh pools)\n $pool_xmr_kryptex = \"xmr.kryptex.network\" ascii\n $pool_etc_kryptex = \"etc.kryptex.network\" ascii\n // Function names in min1.sh\n $fn_install_xmrig = \"install_xmrig\" ascii fullword\n $fn_tg = \"function tg\" ascii\n condition:\n filesize < 30KB and\n $owner_bot_prefix and\n ($tg_owner_comment or $tg_mirror_comment or ($fn_tg and $pool_xmr_kryptex))\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--20314fe5-2964-5a0b-9286-1ed16f20a4e1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.373018Z", "modified": "2026-06-16T16:00:55.373018Z", "name": "MAL_Linux_GHOST_ComfyUI_Python_Kit", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_ComfyUI_Python_Kit {\n meta:\n description = \"Detects GHOST cryptojacker kit Python ComfyUI exploitation framework (py.py + scan.py) \u2014 Python scripts containing _build_python_fetcher downloader builder, PerformanceMonitor fake custom-node class, PIP_PAYLOAD_REPO GitHub URL config variable, and NODE_CLASS_MAPPINGS registration for ComfyUI persistence; 74KB+63KB kit shipped to both GHOST customer operators\"\n license = \"CC BY-NC 4.0 - https://creativecommons.org/licenses/by-nc/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n hash1 = \"dc232b55329d95fe2a47a8d637b7bffea06f18e3d8332ba94b042b1862213a1d\"\n hash2 = \"9023734a70ee6a05d4ecd5466d0c5803f293601836deb00cc417a3add04bd93e\"\n hash3 = \"6e5d897c7fd0060c7da2394ad1bb3584827c216f8aadac4f6ed41b2d915f0070\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"Python ComfyUI Exploitation Framework\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"a4d3ff71-b85c-58f2-9e0e-c6f9300289f1\"\n strings:\n // Core exploitation functions unique to GHOST Python kit\n $fn_build_fetcher = \"_build_python_fetcher\" ascii fullword\n $fn_plant_node = \"plant_backdoor_node\" ascii fullword\n $fn_find_nodes = \"find_target_nodes\" ascii fullword\n // Fake custom-node class \u2014 persistence mechanism\n $class_perfmon = \"PerformanceMonitor\" ascii fullword\n // Kit supply-chain config variable\n $pip_payload_repo = \"PIP_PAYLOAD_REPO\" ascii fullword\n // ComfyUI node registration dicts\n $node_mappings = \"NODE_CLASS_MAPPINGS\" ascii fullword\n $node_display = \"NODE_DISPLAY_NAME_MAPPINGS\" ascii fullword\n // ComfyUI targeting fingerprint\n $comfyui_port = \"8188\" ascii\n $comfyui_stats = \"system_stats\" ascii\n condition:\n filesize < 200KB and\n ($fn_build_fetcher or $fn_plant_node) and\n $class_perfmon and\n ($pip_payload_repo or $node_mappings) and\n ($comfyui_port or $comfyui_stats)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b0714b6a-4db0-5a45-9c49-15f15226df6b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.373197Z", "modified": "2026-06-16T16:00:55.373197Z", "name": "MAL_Linux_GHOST_ComfyUI_Fake_PerformanceMonitor_Node", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_ComfyUI_Fake_PerformanceMonitor_Node {\n meta:\n description = \"Detects GHOST cryptojacker kit post-compromise persistence via malicious ComfyUI custom node \u2014 Python file registering class PerformanceMonitor into NODE_CLASS_MAPPINGS; catches the installed persistence artifact regardless of delivery mechanism; hunt rule for ComfyUI custom-node integrity audits\"\n license = \"CC BY-NC 4.0 - https://creativecommons.org/licenses/by-nc/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"ComfyUI Custom Node Persistence Artifact\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"17a43202-fdd1-5051-8085-9456351ca024\"\n strings:\n // Malicious custom-node class registration \u2014 both dict assignments required\n $class_def = \"class PerformanceMonitor\" ascii\n $node_class_reg = \"NODE_CLASS_MAPPINGS\" ascii fullword\n $node_display_reg = \"NODE_DISPLAY_NAME_MAPPINGS\" ascii fullword\n // Ghost kit function that installs the node\n $fn_plant = \"plant_backdoor_node\" ascii fullword\n condition:\n filesize < 500KB and\n $class_def and\n $node_class_reg and\n ($node_display_reg or $fn_plant)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--07bfb3d0-8f9f-5216-8a80-1a52264e3174", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.373689Z", "modified": "2026-06-16T16:00:55.373689Z", "name": "MAL_Linux_GHOST_check_comfyui_Scanner", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_check_comfyui_Scanner {\n meta:\n description = \"Detects GHOST cryptojacker kit ComfyUI target verification script check_comfyui.sh \u2014 Bash script probing port 8188 /system_stats and /queue for ComfyUI identification, classifying results into sc_comfy/sc_manager/sc_nodes/sc_vuln output files; Russian-language comments; scanning component of GHOST ComfyUI exploitation pipeline\"\n license = \"CC BY-NC 4.0 - https://creativecommons.org/licenses/by-nc/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n hash1 = \"9023734a70ee6a05d4ecd5466d0c5803f293601836deb00cc417a3add04bd93e\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"ComfyUI Target Scanner\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"39b7fb48-31ec-5b1d-b787-2935cad5a60e\"\n strings:\n // ComfyUI probe endpoints\n $probe_system_stats = \"system_stats\" ascii\n $probe_object_info = \"object_info\" ascii\n $probe_queue = \"/queue\" ascii\n // GHOST-specific output file naming convention\n $out_sc_comfy = \"sc_comfy\" ascii\n $out_sc_manager = \"sc_manager\" ascii\n $out_sc_nodes = \"sc_nodes\" ascii\n $out_sc_vuln = \"sc_vuln\" ascii\n // ComfyUI port\n $port_8188 = \"8188\" ascii\n condition:\n filesize < 10KB and\n $port_8188 and\n ($probe_system_stats or $probe_object_info) and\n 2 of ($out_*)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dce86bf3-3e8c-506b-ae70-83f378e532d6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.373815Z", "modified": "2026-06-16T16:00:55.373815Z", "name": "MAL_Linux_GHOST_get_all_ranges_CloudEnumerator", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_get_all_ranges_CloudEnumerator {\n meta:\n description = \"Detects GHOST cryptojacker kit cloud-provider IP-range enumeration script get_all_ranges.sh \u2014 Bash script querying bgpview.io ASN API for 14+ cloud providers including ML-GPU-specific providers (Lambda Labs, Nebius, Datacrunch); reconnaissance prequel to ComfyUI exploitation pipeline targeting GPU-cloud environments\"\n license = \"CC BY-NC 4.0 - https://creativecommons.org/licenses/by-nc/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"Cloud IP-Range Enumerator\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"61f9da50-05bf-5c1c-933a-2a65a73eeae3\"\n strings:\n // bgpview.io API source (used for ASN-to-IP-range lookups)\n $bgpview_api = \"bgpview.io\" ascii\n // ML-GPU-cloud-specific providers \u2014 GHOST-kit targeting signature\n // These rarely appear together in legitimate IP-range tools\n $provider_lambda = \"Lambda Labs\" ascii\n $provider_nebius = \"Nebius\" ascii\n $provider_datacrunch = \"Datacrunch\" ascii\n // Additional providers from get_all_ranges.sh ASN list\n $provider_contabo = \"Contabo\" ascii\n $provider_hetzner = \"Hetzner\" ascii\n // bgpview.io API structure specific to this script\n $bgpview_ips_prefix = \"bgpview.io/asn/\" ascii\n condition:\n filesize < 15KB and\n $bgpview_api and\n $bgpview_ips_prefix and\n 2 of ($provider_*)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dc398181-7638-5fc5-848c-8a9407611ecd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.373935Z", "modified": "2026-06-16T16:00:55.373935Z", "name": "MAL_GHOST_OWNER_Telegram_Bot_Token_Indicator", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_GHOST_OWNER_Telegram_Bot_Token_Indicator {\n meta:\n description = \"Detects GHOST cryptojacker kit via kit-author Vova75Rus OWNER Telegram bot token prefix 8415540095: \u2014 baked into every GHOST customer deployment globally in min1.sh; single string match catches all downstream GHOST operators regardless of wallet, pool, or host configuration; supply-chain detection string covering entire GHOST kit customer base\"\n license = \"CC BY-NC 4.0 - https://creativecommons.org/licenses/by-nc/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"Supply-Chain Indicator\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"f80c179f-1eb9-5088-87ac-05e44eccc4f2\"\n strings:\n // Kit-author OWNER bot token prefix \u2014 globally unique Telegram bot ID\n // DO NOT alert on this in isolation from api.telegram.org contexts\n $owner_bot_prefix = \"8415540095:\" ascii\n // Telegram API context strings \u2014 require at least one for confidence\n $tg_api_url = \"api.telegram.org\" ascii\n $tg_bot_path = \"/bot8415540095:\" ascii\n // GHOST dual-telegram context markers\n $tg_owner_ru = \"\\xD0\\x92\\xD0\\x9B\\xD0\\x90\\xD0\\x94\\xD0\\x95\\xD0\\x9B\\xD0\\x95\\xD0\\xA6\" ascii // \u0412\u041b\u0410\u0414\u0415\u041b\u0415\u0426 (OWNER in Russian)\n condition:\n filesize < 200KB and\n $owner_bot_prefix and\n ($tg_api_url or $tg_bot_path or $tg_owner_ru)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a484fc2f-55e0-5e06-9140-470c6da5d93f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.374051Z", "modified": "2026-06-16T16:00:55.374051Z", "name": "Linux LD_PRELOAD Persistence File Modification", "indicator_types": [ "malicious-activity" ], "pattern": "title: Linux LD_PRELOAD Persistence File Modification\nid: f67e016e-dcd7-4ee3-a2ee-9477ad7f75c2\nstatus: test\ndescription: >-\n Detects write or create operations on /etc/ld.so.preload by non-package-manager\n processes. The GHOST cryptojacker kit writes this file to globally load\n libpam_cache.so into all system processes for LD_PRELOAD rootkit persistence.\n Modification of this file by a shell, curl, or miner process is a high-confidence\n indicator of LD_PRELOAD rootkit installation.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\n - https://censys.com/ghost-cryptojacker-targeting-ai\nauthor: The Hunters Ledger\ndate: 2026/05/25\ntags:\n - attack.persistence\n - attack.defense-evasion\nlogsource:\n category: file_event\n product: linux\ndetection:\n selection_path:\n TargetFilename: '/etc/ld.so.preload'\n filter_pkg_mgr:\n Image|endswith:\n - '/dpkg'\n - '/apt'\n - '/apt-get'\n - '/ldconfig'\n - '/update-alternatives'\n - '/rpm'\n - '/yum'\n - '/dnf'\n condition: selection_path and not filter_pkg_mgr\nfalsepositives:\n - System administrators manually adding a legitimate preload library for debugging or performance purposes (rare; verify path added to the file)\n - Package post-install scripts using ldconfig or update-alternatives to register new shared libraries\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a1f7f480-7372-5967-950f-f5d9b8c4728c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.374166Z", "modified": "2026-06-16T16:00:55.374166Z", "name": "Suspicious Shared Library Created in PAM Security Directory", "indicator_types": [ "malicious-activity" ], "pattern": "title: Suspicious Shared Library Created in PAM Security Directory\nid: 21b2646a-7e0b-4d6c-8392-d976b8388fa3\nstatus: test\ndescription: >-\n Detects creation of a .so shared library file in /lib/security/ or similar PAM\n module directories by non-package-manager processes. The GHOST cryptojacker kit\n drops libpam_cache.so into /lib/security/ using PAM-style filename camouflage as\n a deceptive LD_PRELOAD rootkit. Legitimate PAM modules are always installed via\n package management \u2014 direct file creation from a shell or download tool indicates\n rootkit deployment.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\n - https://censys.com/ghost-cryptojacker-targeting-ai\nauthor: The Hunters Ledger\ndate: 2026/05/25\ntags:\n - attack.defense-evasion\n - attack.persistence\nlogsource:\n category: file_event\n product: linux\ndetection:\n selection_path:\n TargetFilename|startswith:\n - '/lib/security/'\n - '/lib/x86_64-linux-gnu/security/'\n - '/usr/lib/security/'\n - '/usr/lib/x86_64-linux-gnu/security/'\n TargetFilename|endswith: '.so'\n filter_pkg_mgr:\n Image|endswith:\n - '/dpkg'\n - '/apt'\n - '/apt-get'\n - '/rpm'\n - '/yum'\n - '/dnf'\n - '/ldconfig'\n condition: selection_path and not filter_pkg_mgr\nfalsepositives:\n - Legitimate PAM module installation by package manager (filtered by exclusion above \u2014 confirm filter is working)\n - Manual PAM plugin deployment by system administrator (require change management verification)\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5956f922-e13f-5a7e-962b-b6d0f2d499b8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.374281Z", "modified": "2026-06-16T16:00:55.374281Z", "name": "Suspicious LD_PRELOAD Set to Non-Standard Library Path", "indicator_types": [ "malicious-activity" ], "pattern": "title: Suspicious LD_PRELOAD Set to Non-Standard Library Path\nid: 5cd034e9-ac04-4178-8a16-95f291c5d805\nstatus: test\ndescription: >-\n Detects Linux processes launched with LD_PRELOAD environment variable pointing to\n non-standard shared library paths such as /tmp/, /var/tmp/, /home/, or custom\n XDG cache paths. The GHOST cryptojacker kit's _compile_hide_so and _install_preload\n functions may set LD_PRELOAD during rootkit deployment before writing the persistent\n /etc/ld.so.preload entry. Legitimate LD_PRELOAD usage targets well-known system\n library paths only.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026/05/25\ntags:\n - attack.defense-evasion\n - attack.persistence\nlogsource:\n category: process_creation\n product: linux\ndetection:\n selection_env:\n CommandLine|contains:\n - 'LD_PRELOAD=/tmp/'\n - 'LD_PRELOAD=/var/tmp/'\n - 'LD_PRELOAD=/home/'\n - 'LD_PRELOAD=/root/'\n - 'LD_PRELOAD=./lib'\n - 'LD_PRELOAD=/dev/shm/'\n condition: selection_env\nfalsepositives:\n - Debugging or performance testing tools (ltrace, strace wrappers, faketime) using LD_PRELOAD with temporary paths\n - Software build systems that test custom shared libraries from temp directories\n - Some container runtimes that set LD_PRELOAD during container initialization\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dd426046-b829-5738-a534-c30e0544e2b4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.374395Z", "modified": "2026-06-16T16:00:55.374395Z", "name": "auditd - PAM Security Library Directory Write by Non-Package-Manager", "indicator_types": [ "malicious-activity" ], "pattern": "title: auditd - PAM Security Library Directory Write by Non-Package-Manager\nid: f26bb12b-dca1-4b62-adf1-9186d5d31560\nstatus: test\ndescription: >-\n Detects auditd file write events (PATH record type with OPEN_W flag or CREATE)\n on the /lib/security/ directory. Requires auditd rule \"-w /lib/security -p wa\n -k pam_module_write\" to be active. The GHOST cryptojacker kit writes\n libpam_cache.so to this directory using PAM-style filename camouflage; any\n write from a non-package-manager process is a high-confidence rootkit drop.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026/05/25\ntags:\n - attack.defense-evasion\n - attack.persistence\nlogsource:\n product: linux\n service: auditd\ndetection:\n selection_key:\n type: 'PATH'\n key: 'pam_module_write'\n nametype:\n - 'CREATE'\n - 'DELETE'\n filter_pkg_mgr:\n exe|endswith:\n - '/dpkg'\n - '/rpm'\n - '/ldconfig'\n - '/update-alternatives'\n condition: selection_key and not filter_pkg_mgr\nfalsepositives:\n - Package manager post-install hooks installing legitimate PAM modules (filtered above)\n - System administrator manually copying a verified PAM module during maintenance\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4830f397-c0dd-50a8-b90e-01e4db884669", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.374516Z", "modified": "2026-06-16T16:00:55.374516Z", "name": "GHOST ComfyUI Fake PerformanceMonitor Custom Node Planted", "indicator_types": [ "malicious-activity" ], "pattern": "title: GHOST ComfyUI Fake PerformanceMonitor Custom Node Planted\nid: df247923-595c-4760-9a97-f0722dbf664d\nstatus: test\ndescription: >-\n Detects GHOST cryptojacker kit persistence via malicious ComfyUI custom node\n installation. The GHOST Python kit's plant_backdoor_node() function creates a\n Python file containing class PerformanceMonitor registered into NODE_CLASS_MAPPINGS\n within the victim's ComfyUI custom_nodes/ directory. Any file creation event\n matching this pattern in a ComfyUI installation directory is a high-confidence\n indicator of GHOST kit compromise and should trigger immediate node audit.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\n - https://censys.com/ghost-cryptojacker-targeting-ai\nauthor: The Hunters Ledger\ndate: 2026/05/25\ntags:\n - attack.persistence\n - attack.execution\nlogsource:\n category: file_event\n product: linux\ndetection:\n selection_comfyui_node:\n TargetFilename|contains:\n - '/custom_nodes/PerformanceMonitor'\n - '/ComfyUI/custom_nodes/'\n TargetFilename|endswith: '.py'\n condition: selection_comfyui_node\nfalsepositives:\n - Legitimate custom ComfyUI node named PerformanceMonitor installed by authorized user (verify publisher and source repository before dismissing)\n - Development environments where test custom nodes are created in custom_nodes/ (scope exclusion for known dev hosts recommended)\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--05262831-7511-5d83-80e8-9e22bdba13f6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.374632Z", "modified": "2026-06-16T16:00:55.374632Z", "name": "High-Frequency ncat Listener Creation on Linux Host", "indicator_types": [ "malicious-activity" ], "pattern": "title: High-Frequency ncat Listener Creation on Linux Host\nid: 4639e400-9a7d-495f-b7a3-a06de5f3c7db\nstatus: test\ndescription: >-\n Detects frequent ncat -l listener creation on a Linux host. The GHOST\n cryptojacker Operator-A showed 83 ncat invocations in bash history \u2014 the highest\n command frequency \u2014 indicating chronic use of ncat for port testing, makeshift\n backdoor channels, and lateral-movement probing. More than 20 ncat -l invocations\n per hour on a single production server is anomalous and indicates operator\n tradecraft activity. Requires aggregation / threshold logic in SIEM.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026/05/25\ntags:\n - attack.command-and-control\n - attack.execution\nlogsource:\n category: process_creation\n product: linux\ndetection:\n selection_ncat_listener:\n Image|endswith:\n - '/ncat'\n - '/nc'\n - '/netcat'\n CommandLine|contains: ' -l'\n condition: selection_ncat_listener\nfalsepositives:\n - Authorized network testing activities using ncat in controlled environments\n - Security engineers running port testing scripts on network infrastructure hosts\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--079cc0b7-e5d8-513f-9185-4fd813aa9bac", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.374747Z", "modified": "2026-06-16T16:00:55.374747Z", "name": "Hysteria v2 QUIC Proxy Process Execution on Linux Server", "indicator_types": [ "malicious-activity" ], "pattern": "title: Hysteria v2 QUIC Proxy Process Execution on Linux Server\nid: e01c6689-1d47-4f6c-bf23-a71b32d88375\nstatus: test\ndescription: >-\n Detects execution of Hysteria v2 process on a Linux host. The GHOST cryptojacker\n kit installs Hysteria v2 as a covert QUIC/UDP backdoor with bing.com SNI masquerade\n (ports 14433/14444 UDP) using hyst.sh installer. Hysteria v2 execution on a\n production GPU server or ML workload host is a high-confidence indicator of GHOST\n kit compromise. The process is installed as systemd service hysteria-server.service\n with binaries in /usr/local/bin/hysteria.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\n - https://censys.com/ghost-cryptojacker-targeting-ai\nauthor: The Hunters Ledger\ndate: 2026/05/25\ntags:\n - attack.command-and-control\n - attack.defense-evasion\nlogsource:\n category: process_creation\n product: linux\ndetection:\n selection_hysteria:\n Image|endswith: '/hysteria'\n selection_hysteria_service:\n CommandLine|contains: 'hysteria-server'\n condition: selection_hysteria or selection_hysteria_service\nfalsepositives:\n - Legitimate Hysteria v2 usage for censorship circumvention by employees in restrictive-internet regions (rare in corporate GPU environments; verify with owner)\n - Authorized network testing using Hysteria for VPN / proxy research purposes\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--22c98b80-f90c-5a4c-84f8-0970ef3cfb20", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.374861Z", "modified": "2026-06-16T16:00:55.374861Z", "name": "DNS Query to GHOST Cryptojacker Mining Pool Domains", "indicator_types": [ "malicious-activity" ], "pattern": "title: DNS Query to GHOST Cryptojacker Mining Pool Domains\nid: 9fc9cb2d-c3b6-4907-b92c-0e9ccee92d82\nstatus: test\ndescription: >-\n Detects DNS queries to mining pool domains used by GHOST cryptojacker kit\n operators. Kryptex.network domains (xmr/etc/cfx) are used by Operator-A;\n auto.c3pool.org and cfx-asia1.nanopool.org are used by Operator-B. Any DNS\n resolution of these domains from production ML/GPU servers is a high-confidence\n indicator of GHOST kit active mining operation or initial infection stage.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026/05/25\ntags:\n - attack.impact\n - attack.command-and-control\nlogsource:\n category: dns_query\n product: linux\ndetection:\n selection_mining_pools:\n QueryName|endswith:\n - '.kryptex.network'\n - 'auto.c3pool.org'\n - 'cfx-asia1.nanopool.org'\n condition: selection_mining_pools\nfalsepositives:\n - Authorized cryptocurrency mining operations on designated mining hardware (scope exclusion for known mining hosts recommended)\n - Security researchers investigating these pools from sandbox environments\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--787f82f6-889c-5924-9474-a2e3926991d6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.374975Z", "modified": "2026-06-16T16:00:55.374975Z", "name": "GHOST Kit Systemd Camouflage Service Unit Creation", "indicator_types": [ "malicious-activity" ], "pattern": "title: GHOST Kit Systemd Camouflage Service Unit Creation\nid: 16fce30a-b59f-461c-87fc-89ae2d736527\nstatus: test\ndescription: >-\n Detects creation of systemd service unit files using GHOST cryptojacker kit\n camouflage names. The GHOST kit installs fontconfig-cache.service (user-level\n systemd persistence disguised as fontconfig caching) and systemd-journal-flush\n override; operator processes are renamed to dbus-session-monitor (xmrig) and\n gnome-shell-ext-updater (lolMiner). Creation of unit files with these names\n by non-package-manager processes indicates GHOST kit systemd persistence.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026/05/25\ntags:\n - attack.persistence\n - attack.defense-evasion\nlogsource:\n category: file_event\n product: linux\ndetection:\n selection_ghost_unit_names:\n TargetFilename|contains:\n - 'fontconfig-cache.service'\n - 'inotify_guard'\n - 'dbus-session-monitor.service'\n - 'gnome-shell-ext-updater.service'\n - 'archivist-daemon.service'\n - 'journald-svc.service'\n - 'systemd-guard.service'\n condition: selection_ghost_unit_names\nfalsepositives:\n - Custom legitimate service deployments using similar names (extremely unlikely for fontconfig-cache.service or gnome-shell-ext-updater.service as systemd units)\n - Desktop environment package that legitimately provides gnome-shell-ext-updater (verify package manager ownership with dpkg -S or rpm -qf)\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e8186bd0-ac67-53fe-a60b-9a9005051c93", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.375091Z", "modified": "2026-06-16T16:00:55.375091Z", "name": "chattr Immutable Bit Set on Linux Persistence Target Paths", "indicator_types": [ "malicious-activity" ], "pattern": "title: chattr Immutable Bit Set on Linux Persistence Target Paths\nid: f83a039f-885d-4759-a89c-2156a54e7ea5\nstatus: test\ndescription: >-\n Detects chattr +i (set immutable bit) invoked against system persistence file\n paths. The GHOST cryptojacker kit's _lock_files function uses chattr +i on\n /etc/ld.so.preload, /lib/security/libpam_cache.so, and miner binary copies\n to block rm operations by defenders and automated cleanup scripts. Setting the\n immutable bit on LD_PRELOAD-related or PAM-security-directory files is\n exclusively an anti-removal tradecraft technique \u2014 no legitimate use case exists.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026/05/25\ntags:\n - attack.defense-evasion\n - attack.persistence\nlogsource:\n category: process_creation\n product: linux\ndetection:\n selection_chattr:\n Image|endswith: '/chattr'\n CommandLine|contains: '+i'\n selection_sensitive_paths:\n CommandLine|contains:\n - '/etc/ld.so.preload'\n - '/lib/security/'\n - '/etc/init.d/'\n - '/etc/systemd/system/'\n condition: selection_chattr and selection_sensitive_paths\nfalsepositives:\n - System hardening scripts that legitimately use chattr +i on selected configuration files (review CIS benchmark hardening scripts)\n - Container image build processes that lock certain system files (rare; typically not in /lib/security paths)\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4f3e4bf3-7a28-5d99-bca9-15d12ce77be1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.375208Z", "modified": "2026-06-16T16:00:55.375208Z", "name": "High-Frequency memfd_create Syscall from Non-JVM Process on Linux Server", "indicator_types": [ "malicious-activity" ], "pattern": "title: High-Frequency memfd_create Syscall from Non-JVM Process on Linux Server\nid: 3d5c184d-4937-4ab0-93d6-778760e59b9c\nstatus: test\ndescription: >-\n Detects high-frequency memfd_create() syscall invocations from a single non-JVM\n process on a Linux server. The GHOST cryptojacker kit's _memfd_exec function uses\n memfd_create to create anonymous in-memory file descriptors for fileless xmrig and\n lolMiner execution via execveat(), bypassing on-disk file scanning. Requires\n auditd syscall monitoring with \"-a always,exit -F arch=b64 -S memfd_create -k\n fileless_exec\" rule active. Frequency threshold: >5 memfd_create calls from a\n single process within 60 seconds from a non-JVM/browser executable.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026/05/25\ntags:\n - attack.defense-evasion\n - attack.execution\nlogsource:\n product: linux\n service: auditd\ndetection:\n selection_memfd:\n type: 'SYSCALL'\n syscall: 'memfd_create'\n filter_expected:\n exe|contains:\n - 'java'\n - 'chrome'\n - 'chromium'\n - 'firefox'\n - 'node'\n condition: selection_memfd and not filter_expected\nfalsepositives:\n - JVM-based applications (Java, Kotlin, Groovy) using memfd_create for native library loading \u2014 excluded by filter above\n - Python FFI libraries (ctypes, cffi) using memfd_create for anonymous shared memory\n - Legitimate fileless deployment tools used by authorized DevOps processes\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a17586b8-71df-5a54-ac41-e47565c3868b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.375323Z", "modified": "2026-06-16T16:00:55.375323Z", "name": "inotify Watch Created on LD_PRELOAD Persistence File \u2014 Rootkit Watchdog Indicator", "indicator_types": [ "malicious-activity" ], "pattern": "title: inotify Watch Created on LD_PRELOAD Persistence File \u2014 Rootkit Watchdog Indicator\nid: d89cc92a-b3e0-4760-93cd-54d4b609c837\nstatus: test\ndescription: >-\n Detects user-space process creating inotify watch on /etc/ld.so.preload. The GHOST\n cryptojacker kit's _inotify_guard function creates a persistent watchdog process\n (hidden by the rootkit as inotify_guard) that monitors persistence file paths via\n Linux inotify API. Upon detecting defender removal attempts (IN_DELETE, IN_MODIFY,\n IN_MOVED_FROM events), the watchdog immediately re-writes the deleted persistence\n file. inotify watching of /etc/ld.so.preload by a non-security-monitoring process\n is a near-unique resurrection-loop indicator.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026/05/25\ntags:\n - attack.persistence\n - attack.defense-evasion\nlogsource:\n product: linux\n service: auditd\ndetection:\n selection_inotify_preload:\n type: 'SYSCALL'\n syscall: 'inotify_add_watch'\n # Note: auditd records the path argument to inotify_add_watch in PATH records;\n # correlate SYSCALL record with subsequent PATH record containing /etc/ld.so.preload\n condition: selection_inotify_preload\nfalsepositives:\n - Security monitoring agents (Falco, osquery, auditd itself) that monitor ld.so.preload for integrity checking (add image-path exclusions for known security tools)\n - System integrity monitoring tools using inotify for file change detection\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--978e4b65-3eba-59cf-bb0f-b3f64bdb28c0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.375438Z", "modified": "2026-06-16T16:00:55.375438Z", "name": "THL GHOST Cryptojacker Kit DNS Query to Mining Pool Domains", "indicator_types": [ "malicious-activity" ], "pattern": "alert dns $HOME_NET any -> any any (\n msg:\"THL GHOST Cryptojacker Kit DNS Query to Mining Pool Domains\";\n dns.query;\n content:\".kryptex.network\"; endswith; nocase;\n threshold: type threshold, track by_src, count 3, seconds 60;\n classtype:policy-violation;\n reference:url,the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/;\n metadata:affected_product Linux, attack_target Server, deployment Perimeter, performance_impact Low, signature_severity High, tag Cryptojacking, tag GHOST_kit;\n sid:9100101; rev:1;\n)\n\nalert dns $HOME_NET any -> any any (\n msg:\"THL GHOST Cryptojacker Kit DNS Query to C3Pool/Nanopool Mining Domains\";\n dns.query;\n pcre:\"/^(auto\\.c3pool\\.org|cfx-asia1\\.nanopool\\.org|cfx\\.kryptex\\.network)$/i\";\n threshold: type threshold, track by_src, count 2, seconds 60;\n classtype:policy-violation;\n reference:url,the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/;\n metadata:affected_product Linux, attack_target Server, deployment Perimeter, performance_impact Low, signature_severity High, tag Cryptojacking, tag GHOST_kit;\n sid:9100102; rev:1;\n)", "pattern_type": "suricata", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9b110c32-d8d5-5fa3-bf54-bae22975b9da", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.375561Z", "modified": "2026-06-16T16:00:55.375561Z", "name": "THL GHOST Cryptojacker Kit Hysteria v2 QUIC Backdoor Egress \u2014 Known Operator Ports", "indicator_types": [ "malicious-activity" ], "pattern": "alert udp $HOME_NET any -> any 14433:14444 (\n msg:\"THL GHOST Cryptojacker Kit Hysteria v2 QUIC Backdoor Egress \u2014 Known Operator Ports\";\n threshold: type threshold, track by_src, count 5, seconds 60;\n classtype:trojan-activity;\n reference:url,the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/;\n metadata:affected_product Linux, attack_target Server, deployment Perimeter, performance_impact Low, signature_severity Critical, tag Backdoor, tag GHOST_kit, tag Hysteria_v2;\n sid:9100103; rev:1;\n)", "pattern_type": "suricata", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ec9992de-2027-5264-b787-0c30a6a4606b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.375678Z", "modified": "2026-06-16T16:00:55.375678Z", "name": "THL GHOST Cryptojacker Kit Distribution File Download from AEZA Hosting Range", "indicator_types": [ "malicious-activity" ], "pattern": "alert http $HOME_NET any -> 77.110.0.0/16 any (\n msg:\"THL GHOST Cryptojacker Kit Distribution File Download from AEZA Hosting Range\";\n http.uri;\n pcre:\"/\\/(libpam_cache\\.so|ghost\\.sh|hyst\\.sh|min1\\.sh|libpam_cache\\.c)$/\";\n classtype:trojan-activity;\n reference:url,the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/;\n metadata:affected_product Linux, attack_target Server, deployment Perimeter, performance_impact Low, signature_severity Critical, tag Dropper, tag GHOST_kit;\n sid:9100104; rev:1;\n)", "pattern_type": "suricata", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--079980d1-b886-5bbe-b7ec-0b87e471c530", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.375794Z", "modified": "2026-06-16T16:00:55.375794Z", "name": "THL GHOST Cryptojacker Kit ComfyUI Payload Repo Download from GitHub", "indicator_types": [ "malicious-activity" ], "pattern": "alert tls $HOME_NET any -> any any (\n msg:\"THL GHOST Cryptojacker Kit ComfyUI Payload Repo Download from GitHub\";\n tls.sni; content:\"raw.githubusercontent.com\"; endswith; nocase;\n http.uri; pcre:\"/(Vova75Rus\\/ComfyUI-Shell-Executor|jamestechdev-oss\\/ComfyUI-Shell-Plugin)/\";\n classtype:trojan-activity;\n reference:url,the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/;\n metadata:affected_product Linux, attack_target Server, deployment Perimeter, performance_impact Low, signature_severity High, tag ComfyUI_exploit, tag GHOST_kit;\n sid:9100105; rev:1;\n)", "pattern_type": "suricata", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a731f92f-ce74-5fb1-8c2e-2ea3adb5bb01", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.37591Z", "modified": "2026-06-16T16:00:55.37591Z", "name": "THL GHOST Cryptojacker Kit Operator-A Hysteria Admin Panel Callback", "indicator_types": [ "malicious-activity" ], "pattern": "alert http $HOME_NET any -> 77.110.96.200 any (\n msg:\"THL GHOST Cryptojacker Kit Operator-A Hysteria Admin Panel Callback\";\n http.uri; content:\"/api/\"; startswith;\n classtype:trojan-activity;\n reference:url,the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/;\n metadata:affected_product Linux, attack_target Server, deployment Perimeter, performance_impact Low, signature_severity Critical, tag C2, tag GHOST_kit;\n sid:9100106; rev:1;\n)", "pattern_type": "suricata", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--da28bbe4-7353-5a0d-8c9e-5fb55b6c8158", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.376025Z", "modified": "2026-06-16T16:00:55.376025Z", "name": "THL GHOST Cryptojacker Kit OWNER Telegram Bot Token in API Request \u2014 Supply Chain Indicator", "indicator_types": [ "malicious-activity" ], "pattern": "# Rule A: TLS-decryption-capable environments (plaintext HTTP body inspection)\nalert http $HOME_NET any -> any any (\n msg:\"THL GHOST Cryptojacker Kit OWNER Telegram Bot Token in API Request \u2014 Supply Chain Indicator\";\n tls.sni; content:\"api.telegram.org\"; endswith; nocase;\n http.request_body; content:\"8415540095:\"; nocase;\n classtype:trojan-activity;\n reference:url,the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/;\n metadata:affected_product Linux, attack_target Server, deployment Internal, performance_impact Medium, signature_severity Critical, tag Supply_Chain, tag GHOST_kit, tag Telegram_C2;\n sid:9100107; rev:1;\n)\n\n# Rule B: Coarser fallback for environments without TLS decryption \u2014 Telegram egress from production GPU/ML server\nalert tls $HOME_NET any -> any any (\n msg:\"THL GHOST Cryptojacker Kit Telegram API Egress from Production Server \u2014 Covert Mining Report\";\n tls.sni; content:\"api.telegram.org\"; endswith; nocase;\n threshold: type threshold, track by_src, count 5, seconds 300;\n classtype:policy-violation;\n reference:url,the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/;\n metadata:affected_product Linux, attack_target Server, deployment Perimeter, performance_impact Low, signature_severity High, tag GHOST_kit, tag Telegram_reporting;\n sid:9100108; rev:1;\n)", "pattern_type": "suricata", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.376157Z", "modified": "2026-06-16T16:00:55.376157Z", "name": "GHOST cryptojacker kit", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.376273Z", "modified": "2026-06-16T16:00:55.376273Z", "name": "libpam_cache.so LD_PRELOAD rootkit", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.376383Z", "modified": "2026-06-16T16:00:55.376383Z", "name": "Hysteria v2 backdoor", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.376492Z", "modified": "2026-06-16T16:00:55.376492Z", "name": "ComfyUI exploitation framework (Python + fake PerformanceMonitor custom node)", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.376596Z", "modified": "2026-06-16T16:00:55.376596Z", "name": "UnamWebPanel (upstream PHP admin panel from UnamSanctam OSS portfolio)", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.376697Z", "modified": "2026-06-16T16:00:55.376697Z", "name": "xmrig (legitimate upstream Monero miner used by operator)", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.376799Z", "modified": "2026-06-16T16:00:55.376799Z", "name": "lolMiner (legitimate upstream Conflux/ETC miner used by operator)", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.376905Z", "modified": "2026-06-16T16:00:55.376905Z", "name": "libpam_cache.so", "description": "LD_PRELOAD userland rootkit ELF64 - BYTE-IDENTICAL across both customer hosts 77.110.96.200 and 77.110.125.145; refutes per-victim compilation; GCC 13.3.0 Ubuntu 24.04 GLIBC 2.34+; 0/0 VT detections (never scanned)", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.377014Z", "modified": "2026-06-16T16:00:55.377014Z", "name": "libpam_cache.c", "description": "98-line C source for the rootkit - shipped alongside binary for victim-side recompile (kit-author practice); NOT IN VT", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.377121Z", "modified": "2026-06-16T16:00:55.377121Z", "name": "ghost.sh", "description": "Operator-A copy (77.110.96.200) - 1338-line Bash installer GHOST v5.1; 43 functions including 4 container-escape variants; VT 13/63 with only generic signatures (Symantec PUA.Gen.2, Kaspersky HEUR:Downloader.Shell.Miner.a, Microsoft Trojan:Script/Wacatac.B!ml)", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.377227Z", "modified": "2026-06-16T16:00:55.377227Z", "name": "hyst.sh", "description": "Operator-A Hysteria v2 backdoor installer; Russian-language operator wrapper (10 Cyrillic words); admin panel callback http://77.110.96.200:3301; bing.com SNI masquerade; NOT IN VT", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.377333Z", "modified": "2026-06-16T16:00:55.377333Z", "name": "min1.sh", "description": "Operator-A miner-only installer with DUAL-TELEGRAM (OWNER bot 8415540095 kit-author baked + MIRROR bot 8315596543 operator-set); 0/53 VT (UNDETECTED); Last Modified 2026-05-24T17:10:29Z (operator actively iterating)", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.377444Z", "modified": "2026-06-16T16:00:55.377444Z", "name": "check_comfyui.sh", "description": "Operator-A ComfyUI target verification script; Russian-language (4 Cyrillic words including \u0418\u0422\u041e\u0413\u041e, \u041d\u0430\u0439\u0434\u0435\u043d\u043e); GETs /system_stats and /queue endpoints on port 8188", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.377558Z", "modified": "2026-06-16T16:00:55.377558Z", "name": "get_all_ranges.sh", "description": "Operator-A cloud IP-range scraper; Russian-language (4 Cyrillic words); 12 bgpview.io ASN queries + Oracle + Google official ranges; feeds ComfyUI scanner pipeline", "malware_types": [ "backdoor" ], "is_family": false, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--c56f982b-3d7f-5540-91f5-8575d8315c67", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.377674Z", "modified": "2026-06-16T16:00:55.377674Z", "name": "Operator-A bash command history recovered from 77.110.96.200 open directory; 1472 lines; 48 unique Cyrillic words; MIRROR Telegram bot token 8315596543:... typed in plaintext and NEVER cleared", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.377775Z", "modified": "2026-06-16T16:00:55.377775Z", "name": "Acquire Infrastructure: Virtual Private Server", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1583/003", "external_id": "T1583.003" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.377952Z", "modified": "2026-06-16T16:00:55.377952Z", "name": "Develop Capabilities: Malware", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1587/001", "external_id": "T1587.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.378104Z", "modified": "2026-06-16T16:00:55.378104Z", "name": "Establish Accounts: Social Media", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1585/001", "external_id": "T1585.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.378276Z", "modified": "2026-06-16T16:00:55.378276Z", "name": "Exploit Public-Facing Application", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1190", "external_id": "T1190" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.378442Z", "modified": "2026-06-16T16:00:55.378442Z", "name": "Command and Scripting Interpreter: Unix Shell", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1059/004", "external_id": "T1059.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.378649Z", "modified": "2026-06-16T16:00:55.378649Z", "name": "Command and Scripting Interpreter: Python", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1059/006", "external_id": "T1059.006" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.378804Z", "modified": "2026-06-16T16:00:55.378804Z", "name": "Shared Modules (LD_PRELOAD)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1129", "external_id": "T1129" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.37898Z", "modified": "2026-06-16T16:00:55.37898Z", "name": "Boot or Logon Autostart Execution: XDG Autostart Entries", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1547/013", "external_id": "T1547.013" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.379163Z", "modified": "2026-06-16T16:00:55.379163Z", "name": "Create or Modify System Process: Systemd Service", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1543/002", "external_id": "T1543.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.379341Z", "modified": "2026-06-16T16:00:55.379341Z", "name": "Scheduled Task/Job: Cron", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1053/003", "external_id": "T1053.003" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.379468Z", "modified": "2026-06-16T16:00:55.379468Z", "name": "Boot or Logon Initialization Scripts: RC Scripts", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1037/004", "external_id": "T1037.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.379612Z", "modified": "2026-06-16T16:00:55.379612Z", "name": "Hijack Execution Flow: Dynamic Linker Hijacking", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1574/006", "external_id": "T1574.006" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.379731Z", "modified": "2026-06-16T16:00:55.379731Z", "name": "Compromise Host Software Binary", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1554", "external_id": "T1554" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.37985Z", "modified": "2026-06-16T16:00:55.37985Z", "name": "Escape to Host (4 container-escape variants)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1611", "external_id": "T1611" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.379999Z", "modified": "2026-06-16T16:00:55.379999Z", "name": "Rootkit", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1014", "external_id": "T1014" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.380139Z", "modified": "2026-06-16T16:00:55.380139Z", "name": "Hide Artifacts: Hidden Files and Directories", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1564/001", "external_id": "T1564.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.380271Z", "modified": "2026-06-16T16:00:55.380271Z", "name": "Hide Artifacts (ports via /proc/net/tcp fopen hook)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1564", "external_id": "T1564" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.380389Z", "modified": "2026-06-16T16:00:55.380389Z", "name": "Obfuscated Files or Information (deceptive PAM filename)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1027", "external_id": "T1027" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.380507Z", "modified": "2026-06-16T16:00:55.380507Z", "name": "Masquerading: Match Legitimate Name or Location", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1036/005", "external_id": "T1036.005" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.380624Z", "modified": "2026-06-16T16:00:55.380624Z", "name": "Reflective Code Loading (memfd_create)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1620", "external_id": "T1620" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.380741Z", "modified": "2026-06-16T16:00:55.380741Z", "name": "Indicator Removal: Clear Linux Logs", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1070/002", "external_id": "T1070.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.380857Z", "modified": "2026-06-16T16:00:55.380857Z", "name": "Indicator Removal: Clear Command History", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1070/003", "external_id": "T1070.003" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.381003Z", "modified": "2026-06-16T16:00:55.381003Z", "name": "Mutual Exclusion (anti_hisana competitor displacement)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1480/002", "external_id": "T1480.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.381128Z", "modified": "2026-06-16T16:00:55.381128Z", "name": "File and Directory Permissions Modification: Linux (chattr +i)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1222/002", "external_id": "T1222.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.381248Z", "modified": "2026-06-16T16:00:55.381248Z", "name": "Unsecured Credentials: Private Keys (SSH key harvest)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/004", "external_id": "T1552.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.381365Z", "modified": "2026-06-16T16:00:55.381365Z", "name": "Process Discovery", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1057", "external_id": "T1057" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.381485Z", "modified": "2026-06-16T16:00:55.381485Z", "name": "Remote System Discovery", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1018", "external_id": "T1018" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.381603Z", "modified": "2026-06-16T16:00:55.381603Z", "name": "File and Directory Discovery (container detection)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1083", "external_id": "T1083" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.381721Z", "modified": "2026-06-16T16:00:55.381721Z", "name": "System Information Discovery", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1082", "external_id": "T1082" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.381838Z", "modified": "2026-06-16T16:00:55.381838Z", "name": "Active Scanning: Vulnerability Scanning (ComfyUI port 8188)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1595/002", "external_id": "T1595.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.381955Z", "modified": "2026-06-16T16:00:55.381955Z", "name": "Remote Services: SSH", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1021/004", "external_id": "T1021.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.38209Z", "modified": "2026-06-16T16:00:55.38209Z", "name": "Application Layer Protocol: Web Protocols", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1071/001", "external_id": "T1071.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.382225Z", "modified": "2026-06-16T16:00:55.382225Z", "name": "Application Layer Protocol: DNS", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1071/004", "external_id": "T1071.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.382342Z", "modified": "2026-06-16T16:00:55.382342Z", "name": "Proxy: Internal Proxy (self-hosted pool proxies)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1090/001", "external_id": "T1090.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.382459Z", "modified": "2026-06-16T16:00:55.382459Z", "name": "Protocol Tunneling (Hysteria v2 QUIC/UDP)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1572", "external_id": "T1572" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.382591Z", "modified": "2026-06-16T16:00:55.382591Z", "name": "Web Service: Bidirectional Communication (dual Telegram bots)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1102/002", "external_id": "T1102.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.382709Z", "modified": "2026-06-16T16:00:55.382709Z", "name": "Resource Hijacking: Compute Hijacking (primary impact)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1496/001", "external_id": "T1496.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.382825Z", "modified": "2026-06-16T16:00:55.382825Z", "name": "Resource Hijacking: Bandwidth Hijacking (Hysteria)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1496/002", "external_id": "T1496.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.382953Z", "modified": "2026-06-16T16:00:55.382953Z", "name": "ghost-cryptojacker-vova75rus-77.110.96.200 infrastructure", "infrastructure_types": [ "command-and-control", "hosting" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--37767611-9657-52fd-9710-f294d9519105", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.384266Z", "modified": "2026-06-16T16:00:55.384266Z", "relationship_type": "indicates", "source_ref": "indicator--31de5704-b9f1-5a38-af29-a1d3c16f093c", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a57c621-5ae0-5b67-a064-bffa2b1bec46", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.384493Z", "modified": "2026-06-16T16:00:55.384493Z", "relationship_type": "indicates", "source_ref": "indicator--25c06a59-d267-5c27-92e7-73c12559f225", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4b22effb-4c4f-5cea-800c-f831157cdbd2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.384643Z", "modified": "2026-06-16T16:00:55.384643Z", "relationship_type": "indicates", "source_ref": "indicator--da981557-2e76-5cd5-8b5d-2bd5321fa1cc", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7741fd1e-a792-5abe-96db-e7d559e5dd2a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.384774Z", "modified": "2026-06-16T16:00:55.384774Z", "relationship_type": "indicates", "source_ref": "indicator--5f5b0e7e-a2e8-55be-b77c-86662db1b49e", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--84c96b28-1236-5ee0-ac30-d9071e34726e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.3849Z", "modified": "2026-06-16T16:00:55.3849Z", "relationship_type": "indicates", "source_ref": "indicator--b821c58f-d17a-584d-ab7c-9660f78c3c73", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--63383891-7205-5643-8de7-7b0993ed73c9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.385017Z", "modified": "2026-06-16T16:00:55.385017Z", "relationship_type": "indicates", "source_ref": "indicator--535731ea-77f8-59b0-b15c-63019ff12479", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b62bd76-f6ca-523a-9530-9a1cbd1b65ef", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.385155Z", "modified": "2026-06-16T16:00:55.385155Z", "relationship_type": "indicates", "source_ref": "indicator--0a40092b-291d-5d74-9d5c-c9b9e23e083e", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6aa13b19-91bb-50a8-9cff-45d0d374cdac", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.385314Z", "modified": "2026-06-16T16:00:55.385314Z", "relationship_type": "indicates", "source_ref": "indicator--3924a79f-39ad-51dd-b8e2-43ac4f8ee54c", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1bcfaa67-f2f3-5802-bcd9-6e01d9ac6761", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.385445Z", "modified": "2026-06-16T16:00:55.385445Z", "relationship_type": "indicates", "source_ref": "indicator--2942f30a-88a9-5385-8e95-065c37786c43", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a2835f80-e51d-52c3-91f2-881ee87fb013", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.385629Z", "modified": "2026-06-16T16:00:55.385629Z", "relationship_type": "indicates", "source_ref": "indicator--a75c5beb-93b4-504f-b0cb-ba40949b8932", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d0ed7302-1abc-550b-92ef-ba3ab3e920b3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.38577Z", "modified": "2026-06-16T16:00:55.38577Z", "relationship_type": "indicates", "source_ref": "indicator--63081f19-a1d6-5053-a4b2-c426db9e40fb", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e480960-0d15-5dfd-9b1b-e57f96a8f143", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.3859Z", "modified": "2026-06-16T16:00:55.3859Z", "relationship_type": "indicates", "source_ref": "indicator--e24d7444-2d05-5cd9-b339-d3c1e963dcef", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1f4cd318-2002-539b-bba6-8e1c7ec1a7dd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.386002Z", "modified": "2026-06-16T16:00:55.386002Z", "relationship_type": "indicates", "source_ref": "indicator--f53751be-9c3c-5867-82e8-1940fb262b2e", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--57936b85-ecd8-5676-ab76-87b3a5a3b26d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.3861Z", "modified": "2026-06-16T16:00:55.3861Z", "relationship_type": "indicates", "source_ref": "indicator--e2ad61c2-820a-5176-9fe0-7dfe67f6b6e8", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f190de7-c600-5c97-8b82-60f0306a2157", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.386198Z", "modified": "2026-06-16T16:00:55.386198Z", "relationship_type": "indicates", "source_ref": "indicator--945c4ea1-5c16-55c9-a98c-dee7d2dfb993", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--10ec03cb-65dc-5eb5-bcc5-05e0dea67311", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.386296Z", "modified": "2026-06-16T16:00:55.386296Z", "relationship_type": "indicates", "source_ref": "indicator--3465630b-25cc-50fa-a9a4-bb1e2b64aa0a", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--65206da1-9dd2-5e74-9df9-025ffc9b6c18", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.386393Z", "modified": "2026-06-16T16:00:55.386393Z", "relationship_type": "indicates", "source_ref": "indicator--5e0a3104-cc85-5091-9437-f5795d2171b1", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--915b57b2-3412-5ae8-9688-cb08159ea0ff", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.386495Z", "modified": "2026-06-16T16:00:55.386495Z", "relationship_type": "indicates", "source_ref": "indicator--fd9b3cb2-de6e-5d1c-aec2-f8bd892dda95", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4ff16bf4-de82-5b85-b487-7b6b95229ca4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.386593Z", "modified": "2026-06-16T16:00:55.386593Z", "relationship_type": "indicates", "source_ref": "indicator--861ba2a9-51e3-5eaa-b24c-6466bdc41ba9", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6753d8e2-fead-5b1d-a71c-91bbda662a08", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.386689Z", "modified": "2026-06-16T16:00:55.386689Z", "relationship_type": "indicates", "source_ref": "indicator--44cedbec-2e5d-5a2b-9083-7412f44334e6", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b788f9b4-c609-5466-86c6-5c8394e68b9e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.386787Z", "modified": "2026-06-16T16:00:55.386787Z", "relationship_type": "indicates", "source_ref": "indicator--3b717480-1786-5beb-ab11-5c180da3de1d", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5f3291c-bbe3-52d2-9e73-e9ebc9ee200c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.386884Z", "modified": "2026-06-16T16:00:55.386884Z", "relationship_type": "indicates", "source_ref": "indicator--f45acd05-fede-5fa5-94ac-1cd78a421f2f", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bfc4ca44-e388-52b7-8333-aa1f70927f64", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.386979Z", "modified": "2026-06-16T16:00:55.386979Z", "relationship_type": "indicates", "source_ref": "indicator--ed1a4e8c-f8a4-5f4b-9385-23fe8ac3cf03", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--431de855-83f8-511f-ab08-84366c3d8533", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.387078Z", "modified": "2026-06-16T16:00:55.387078Z", "relationship_type": "indicates", "source_ref": "indicator--4ba05cb5-2063-59d1-8c76-2a9f0848f359", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01ec391b-fce7-5114-84ea-228c0ba006dc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.387184Z", "modified": "2026-06-16T16:00:55.387184Z", "relationship_type": "indicates", "source_ref": "indicator--c15d88ec-6a0d-5f85-bd50-d10c77034938", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--54413e49-0e20-5dec-a62d-c5ac81c9b837", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.387295Z", "modified": "2026-06-16T16:00:55.387295Z", "relationship_type": "indicates", "source_ref": "indicator--a978e77e-35c9-576d-8d1e-1b7aba19eadb", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--00b14282-435d-5965-b5d1-64c1b875c575", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.387396Z", "modified": "2026-06-16T16:00:55.387396Z", "relationship_type": "indicates", "source_ref": "indicator--037e9e3d-33d6-57f8-8bd9-5b090cda4228", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--019f5ebd-27ff-5e22-a911-ef63f3d0ada3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.387498Z", "modified": "2026-06-16T16:00:55.387498Z", "relationship_type": "indicates", "source_ref": "indicator--3ed50382-45c7-52b0-81e0-a540fa4f7a77", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0ca7ace3-dc3f-584e-9ca9-e0ba31203a7e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.387596Z", "modified": "2026-06-16T16:00:55.387596Z", "relationship_type": "indicates", "source_ref": "indicator--37baa463-4490-5942-858f-af4e9a013dbd", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f1ea8da3-3bbe-57d7-b283-4a4a1d93e3ee", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.387692Z", "modified": "2026-06-16T16:00:55.387692Z", "relationship_type": "indicates", "source_ref": "indicator--e1ed5be4-63e1-5abe-bc83-1c52bc8772dc", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5ad0c3c-2c41-5e9f-aa67-cf1ac83556cc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.387789Z", "modified": "2026-06-16T16:00:55.387789Z", "relationship_type": "indicates", "source_ref": "indicator--be07cd65-95b6-5ca4-8279-d70ba1dd7dad", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6c7f437-dba2-5670-b8c8-e7285c32bb38", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.387884Z", "modified": "2026-06-16T16:00:55.387884Z", "relationship_type": "indicates", "source_ref": "indicator--6d1bc44e-fe7e-5313-9aae-cffcd26c0997", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa984fee-fec4-58ed-a579-1b587ae0d00b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.387978Z", "modified": "2026-06-16T16:00:55.387978Z", "relationship_type": "indicates", "source_ref": "indicator--3dfaa4d5-4638-5546-9b78-e5e5a0f551b4", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa86165d-1794-5d6b-872f-e418477e94a5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.388072Z", "modified": "2026-06-16T16:00:55.388072Z", "relationship_type": "indicates", "source_ref": "indicator--876ea16b-5804-5690-85ee-684bad2f221e", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--85b76cfd-11fb-57af-ad3d-1891f2ec6055", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.388168Z", "modified": "2026-06-16T16:00:55.388168Z", "relationship_type": "indicates", "source_ref": "indicator--f1cd66d6-553a-5791-a654-204dd2e3a85b", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c701703a-90f7-5c2a-8045-7fe717c3ca4d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.388263Z", "modified": "2026-06-16T16:00:55.388263Z", "relationship_type": "indicates", "source_ref": "indicator--6e1517d0-ebed-56bf-ab6a-dbb1dc8a8021", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--da7e6adf-55f4-5ce1-bc63-3b2f89e12b9c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.388362Z", "modified": "2026-06-16T16:00:55.388362Z", "relationship_type": "indicates", "source_ref": "indicator--616d755d-07d1-53b4-9af7-ceff7dff37e7", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e2a9f37-e70e-5d82-9495-0b1065a42fb1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.388478Z", "modified": "2026-06-16T16:00:55.388478Z", "relationship_type": "indicates", "source_ref": "indicator--0b2abd83-408d-5507-b85e-bbffaaa202e7", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ffe7a43b-329a-5856-a273-1cb711a41a2d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.388597Z", "modified": "2026-06-16T16:00:55.388597Z", "relationship_type": "indicates", "source_ref": "indicator--346e9bdf-0129-5bc8-9ecc-27f99e556375", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f75a10e9-f131-5166-93d0-df8f4eea32de", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.388693Z", "modified": "2026-06-16T16:00:55.388693Z", "relationship_type": "indicates", "source_ref": "indicator--cca2fb59-54ea-5f41-b885-b4da230895bd", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0cf4129a-6480-5d98-9020-e69c90ef474a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.388789Z", "modified": "2026-06-16T16:00:55.388789Z", "relationship_type": "indicates", "source_ref": "indicator--f4470d02-406f-5e86-8aad-0afb255bc3ad", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--339e65a2-c67d-5805-afeb-0e1a34b9a2ae", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.388886Z", "modified": "2026-06-16T16:00:55.388886Z", "relationship_type": "indicates", "source_ref": "indicator--4d021958-4d7d-5ffe-8031-6ebb99e5279e", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4d489fb4-d03d-5062-81d9-205452dfe5ac", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.38898Z", "modified": "2026-06-16T16:00:55.38898Z", "relationship_type": "indicates", "source_ref": "indicator--20314fe5-2964-5a0b-9286-1ed16f20a4e1", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7aa59ce0-bb3f-5b7d-b154-da70cebcbbf5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.389076Z", "modified": "2026-06-16T16:00:55.389076Z", "relationship_type": "indicates", "source_ref": "indicator--b0714b6a-4db0-5a45-9c49-15f15226df6b", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa10e56d-ce8c-5872-849d-ca6537be1f6f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.389171Z", "modified": "2026-06-16T16:00:55.389171Z", "relationship_type": "indicates", "source_ref": "indicator--07bfb3d0-8f9f-5216-8a80-1a52264e3174", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a2074af-1fa8-581e-96a0-09793b7e3702", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.389268Z", "modified": "2026-06-16T16:00:55.389268Z", "relationship_type": "indicates", "source_ref": "indicator--dce86bf3-3e8c-506b-ae70-83f378e532d6", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ae25ea10-1637-55b6-8eab-51333e55d5ce", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.389363Z", "modified": "2026-06-16T16:00:55.389363Z", "relationship_type": "indicates", "source_ref": "indicator--dc398181-7638-5fc5-848c-8a9407611ecd", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--62e5eb37-5dad-53d5-b113-c46981730652", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.389458Z", "modified": "2026-06-16T16:00:55.389458Z", "relationship_type": "indicates", "source_ref": "indicator--a484fc2f-55e0-5e06-9140-470c6da5d93f", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5f2f19b6-07d4-5ae3-821e-147e294850c9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.389554Z", "modified": "2026-06-16T16:00:55.389554Z", "relationship_type": "indicates", "source_ref": "indicator--a1f7f480-7372-5967-950f-f5d9b8c4728c", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d71a094-2740-5abd-8530-8de2d6679224", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.38965Z", "modified": "2026-06-16T16:00:55.38965Z", "relationship_type": "indicates", "source_ref": "indicator--5956f922-e13f-5a7e-962b-b6d0f2d499b8", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--136345fe-f9e0-54dd-8016-8cbf45ca96c4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.389747Z", "modified": "2026-06-16T16:00:55.389747Z", "relationship_type": "indicates", "source_ref": "indicator--dd426046-b829-5738-a534-c30e0544e2b4", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb14188d-aaa8-5e3a-b45c-4b38fd6d737a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.389843Z", "modified": "2026-06-16T16:00:55.389843Z", "relationship_type": "indicates", "source_ref": "indicator--4830f397-c0dd-50a8-b90e-01e4db884669", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--19fabbf6-e90d-5429-b748-a0010d043f2b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.389953Z", "modified": "2026-06-16T16:00:55.389953Z", "relationship_type": "indicates", "source_ref": "indicator--05262831-7511-5d83-80e8-9e22bdba13f6", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d990f9ed-9717-5eeb-bba3-54376a9b0f02", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.390129Z", "modified": "2026-06-16T16:00:55.390129Z", "relationship_type": "indicates", "source_ref": "indicator--079cc0b7-e5d8-513f-9185-4fd813aa9bac", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2d5326f-b29d-5e94-9296-fee4c4a1eb71", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.390256Z", "modified": "2026-06-16T16:00:55.390256Z", "relationship_type": "indicates", "source_ref": "indicator--22c98b80-f90c-5a4c-84f8-0970ef3cfb20", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--459e17ac-289e-5c75-9d98-ffa23acdf84f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.39039Z", "modified": "2026-06-16T16:00:55.39039Z", "relationship_type": "indicates", "source_ref": "indicator--787f82f6-889c-5924-9474-a2e3926991d6", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3f3717d3-3c54-5bcc-8ac7-1a25a4e9098a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.390547Z", "modified": "2026-06-16T16:00:55.390547Z", "relationship_type": "indicates", "source_ref": "indicator--e8186bd0-ac67-53fe-a60b-9a9005051c93", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5f667921-43e3-5fd7-ab41-dba29b58de25", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.390713Z", "modified": "2026-06-16T16:00:55.390713Z", "relationship_type": "indicates", "source_ref": "indicator--4f3e4bf3-7a28-5d99-bca9-15d12ce77be1", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8e3d811-5df6-54f6-8967-a0102e0359b4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.390871Z", "modified": "2026-06-16T16:00:55.390871Z", "relationship_type": "indicates", "source_ref": "indicator--a17586b8-71df-5a54-ac41-e47565c3868b", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d396f995-b1ec-545e-a116-d209bead7c30", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.391024Z", "modified": "2026-06-16T16:00:55.391024Z", "relationship_type": "indicates", "source_ref": "indicator--978e4b65-3eba-59cf-bb0f-b3f64bdb28c0", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53a362e4-e625-53e7-bc90-912cbbe58d45", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.391208Z", "modified": "2026-06-16T16:00:55.391208Z", "relationship_type": "indicates", "source_ref": "indicator--9b110c32-d8d5-5fa3-bf54-bae22975b9da", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92aca467-d23a-5d23-bc4c-19bde523f1b8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.391386Z", "modified": "2026-06-16T16:00:55.391386Z", "relationship_type": "indicates", "source_ref": "indicator--ec9992de-2027-5264-b787-0c30a6a4606b", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d918f974-fdec-5de0-a2b5-8754be125cda", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.391516Z", "modified": "2026-06-16T16:00:55.391516Z", "relationship_type": "indicates", "source_ref": "indicator--079980d1-b886-5bbe-b7ec-0b87e471c530", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0101280e-d413-550d-b73d-1b49b8a6be8d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.391643Z", "modified": "2026-06-16T16:00:55.391643Z", "relationship_type": "indicates", "source_ref": "indicator--a731f92f-ce74-5fb1-8c2e-2ea3adb5bb01", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c09cf03f-7577-5ba5-ad39-a122b32e74c0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.391752Z", "modified": "2026-06-16T16:00:55.391752Z", "relationship_type": "indicates", "source_ref": "indicator--da28bbe4-7353-5a0d-8c9e-5fb55b6c8158", "target_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9d19763e-e274-5fd1-9ec2-cd112b87dc26", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.391855Z", "modified": "2026-06-16T16:00:55.391855Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--63edcfdb-1ec3-5016-887d-6e99c7e7a4a9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.391961Z", "modified": "2026-06-16T16:00:55.391961Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7a70f6cd-3665-5399-8fc6-cea0ac06bbfa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.392084Z", "modified": "2026-06-16T16:00:55.392084Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0299d816-db5f-53ff-b1b0-7731527e45d9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.392201Z", "modified": "2026-06-16T16:00:55.392201Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4d44ed1b-d183-5909-95df-b243dcd63aed", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.392312Z", "modified": "2026-06-16T16:00:55.392312Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4c1fe9e2-9858-5b6a-805d-b4b92f866c03", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.392446Z", "modified": "2026-06-16T16:00:55.392446Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--529949b0-a0da-571c-af16-3d73bbe177c1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.392554Z", "modified": "2026-06-16T16:00:55.392554Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2127a3c-ff61-5871-a77d-bbdce2572032", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.392662Z", "modified": "2026-06-16T16:00:55.392662Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5283fdb-86c1-5b42-997f-21bd2e04ec16", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.392759Z", "modified": "2026-06-16T16:00:55.392759Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6e92812-48d8-50e9-97f1-039296ea7674", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.392854Z", "modified": "2026-06-16T16:00:55.392854Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa04269b-6fb1-5110-83f1-e88ff2ad4a28", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.39295Z", "modified": "2026-06-16T16:00:55.39295Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--45bc8406-c1ec-5a17-8255-e7f3c28069e9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.393051Z", "modified": "2026-06-16T16:00:55.393051Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e6706ac8-efb8-552c-8dc2-4f4620e646c2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.393148Z", "modified": "2026-06-16T16:00:55.393148Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ed0c2b3f-e429-5dd5-be16-861bdd79446d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.393242Z", "modified": "2026-06-16T16:00:55.393242Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--afd7b728-6702-58c1-8cc7-3b12d4d299c0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.393336Z", "modified": "2026-06-16T16:00:55.393336Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--36dfca65-6069-591b-87ef-ada639ef693a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.393431Z", "modified": "2026-06-16T16:00:55.393431Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d3d12449-dbd1-5000-916a-70497eb3692a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.393525Z", "modified": "2026-06-16T16:00:55.393525Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e072a51-db3a-5c1c-9239-5ed7e000459c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.393619Z", "modified": "2026-06-16T16:00:55.393619Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f0d1853d-fbb2-59be-9b2b-5f513d17d4e0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.393715Z", "modified": "2026-06-16T16:00:55.393715Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97dc3e58-2f5a-5559-9cea-52859523cafa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.39381Z", "modified": "2026-06-16T16:00:55.39381Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e6595f79-f8fa-5a3c-a9c6-002d9345cdd3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.393904Z", "modified": "2026-06-16T16:00:55.393904Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--efb67884-6e42-577a-af5b-28556530e2fe", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.394001Z", "modified": "2026-06-16T16:00:55.394001Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--10c21099-bb92-516f-9080-1e592450e42e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.394216Z", "modified": "2026-06-16T16:00:55.394216Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ed9da21b-30ed-540f-8662-89657e2ed624", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.394313Z", "modified": "2026-06-16T16:00:55.394313Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--736787e3-4933-551f-bc78-3ce3244c63e0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.394408Z", "modified": "2026-06-16T16:00:55.394408Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8ab6a923-d674-5b7e-8429-cb1b81c7e361", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.394503Z", "modified": "2026-06-16T16:00:55.394503Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d789d28f-6faa-53b3-b86a-2ced915338d3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.394598Z", "modified": "2026-06-16T16:00:55.394598Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c9a91137-b73e-5e89-bce0-6e9fc79233a7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.394693Z", "modified": "2026-06-16T16:00:55.394693Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a4f72c2-2c8e-570a-8f4b-a472c9879757", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.394801Z", "modified": "2026-06-16T16:00:55.394801Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1766f277-a8f2-5030-8c87-fdcf28a9dd73", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.394937Z", "modified": "2026-06-16T16:00:55.394937Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31d0a778-8634-5af4-b7e9-ef285e7f59dc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.395037Z", "modified": "2026-06-16T16:00:55.395037Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3746e35d-3364-5ec4-af1b-2561708b2387", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.395132Z", "modified": "2026-06-16T16:00:55.395132Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--acf47b5b-c8de-5b3c-bac0-0fb9952e2a50", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.395225Z", "modified": "2026-06-16T16:00:55.395225Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de1b37b0-308f-56d0-964d-9b6f6a83f240", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.39532Z", "modified": "2026-06-16T16:00:55.39532Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f00b828-0a0c-5a17-bddb-ec9f16d1d78d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.395416Z", "modified": "2026-06-16T16:00:55.395416Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e47d003-1772-558b-b0a8-1fadcdd32cf3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.395511Z", "modified": "2026-06-16T16:00:55.395511Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64a25e6e-413c-5315-9cf1-72f1745537b6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.395605Z", "modified": "2026-06-16T16:00:55.395605Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6880da3b-0a57-5ab3-9337-ca1da13b2c61", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.3957Z", "modified": "2026-06-16T16:00:55.3957Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48106c67-01d2-5b9c-a508-ebeb1a590a9e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.395796Z", "modified": "2026-06-16T16:00:55.395796Z", "relationship_type": "communicates-with", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--945341e6-cb7f-5e01-b0be-a58cc4194a20", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.395892Z", "modified": "2026-06-16T16:00:55.395892Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5568200-511e-59df-bbc9-e013b63b7d2b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.395988Z", "modified": "2026-06-16T16:00:55.395988Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--21ec29cc-5dd3-5274-9118-9a992135cdd5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.396136Z", "modified": "2026-06-16T16:00:55.396136Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2e30075-5e3f-5bfa-85d6-80c10102886b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.396269Z", "modified": "2026-06-16T16:00:55.396269Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53c0cc5c-fa43-557e-af57-500f4a3852b5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.396389Z", "modified": "2026-06-16T16:00:55.396389Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--488c3369-dcd5-5c0d-9d93-fe4e71b632f2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.396525Z", "modified": "2026-06-16T16:00:55.396525Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1354826e-1e88-5a6c-bef2-4cff55fe85ad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.396656Z", "modified": "2026-06-16T16:00:55.396656Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ce8b365-c7ed-5d42-bc8a-8d9eab1deaec", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.396787Z", "modified": "2026-06-16T16:00:55.396787Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2731416-b563-5970-af3d-9638c78a90cf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.396934Z", "modified": "2026-06-16T16:00:55.396934Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5b2bc95b-1bbb-5846-a917-5913bd166b0d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.397059Z", "modified": "2026-06-16T16:00:55.397059Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bc768be6-5d8a-5157-8394-713ef6561de4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.397187Z", "modified": "2026-06-16T16:00:55.397187Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e92d14e-7c4e-5d1a-985e-75963d832e13", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.397344Z", "modified": "2026-06-16T16:00:55.397344Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09e75b47-4ff9-5d1d-a3ec-299f2acc545b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.397472Z", "modified": "2026-06-16T16:00:55.397472Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--28da6d8e-87f7-530f-9ee9-5c114234f63c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.397581Z", "modified": "2026-06-16T16:00:55.397581Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4accc18-61dd-52a0-b24f-5af39d473ed2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.3977Z", "modified": "2026-06-16T16:00:55.3977Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--afab779f-05d3-5cec-b0b3-655e5ec38ced", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.397819Z", "modified": "2026-06-16T16:00:55.397819Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b632b1c-03ea-57d8-b824-29b65b0b2f33", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.397915Z", "modified": "2026-06-16T16:00:55.397915Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--69a483b5-27e1-54f4-a91c-c34ba1b7bdda", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.398015Z", "modified": "2026-06-16T16:00:55.398015Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b3fd0de2-8049-5395-9b7f-65a86619a58e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.398113Z", "modified": "2026-06-16T16:00:55.398113Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aabaf056-e44a-5f4f-88cf-fa1e9a74876e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.398208Z", "modified": "2026-06-16T16:00:55.398208Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5fb1ed07-2feb-572f-9608-0f5f31d1172c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.398303Z", "modified": "2026-06-16T16:00:55.398303Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b3e4e6a6-3213-543e-8b33-9a2f8ebf53ec", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.398403Z", "modified": "2026-06-16T16:00:55.398403Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1136cfc4-2e25-5fec-a51d-b2f35eeb629d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.398498Z", "modified": "2026-06-16T16:00:55.398498Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d6eecff0-1e89-546c-a4d5-6f38b219d848", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.398599Z", "modified": "2026-06-16T16:00:55.398599Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--52ba1f13-fc15-588d-b1f3-d53d9afca145", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.398693Z", "modified": "2026-06-16T16:00:55.398693Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--597ecb40-640f-5ca3-b78d-eed35209c39f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.398789Z", "modified": "2026-06-16T16:00:55.398789Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a134205f-991b-5153-b882-c122a2393da6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.398883Z", "modified": "2026-06-16T16:00:55.398883Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4646731b-2faa-575a-9859-d68a4ce66226", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.398976Z", "modified": "2026-06-16T16:00:55.398976Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c0e86ed9-c51b-5a85-b2d4-793fdba23841", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.399124Z", "modified": "2026-06-16T16:00:55.399124Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--10ab433b-0fee-51ea-891e-b82ada3396c4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.399287Z", "modified": "2026-06-16T16:00:55.399287Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9125ce98-7d59-5178-b344-38297313cf21", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.399411Z", "modified": "2026-06-16T16:00:55.399411Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6cbcb64e-5781-5b23-a626-57cec17df6e2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.399509Z", "modified": "2026-06-16T16:00:55.399509Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bf2fd3f4-9fb1-5543-9c2a-acbbbb1bb8b2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.399607Z", "modified": "2026-06-16T16:00:55.399607Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f100902f-0f06-5c65-9332-8f9cb1845af5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.399706Z", "modified": "2026-06-16T16:00:55.399706Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b39beb79-a4c1-5b27-866f-bd746c793bb7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.399804Z", "modified": "2026-06-16T16:00:55.399804Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--995118f4-3904-5df6-ad2d-937a972e1dfb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.3999Z", "modified": "2026-06-16T16:00:55.3999Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b528c94f-53e4-5aa1-b617-c8339783ad44", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.400006Z", "modified": "2026-06-16T16:00:55.400006Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b11628c0-2873-539e-84ac-23a499741a2e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.400123Z", "modified": "2026-06-16T16:00:55.400123Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--93fc157a-f8d3-54aa-833a-fce0277e6294", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.400221Z", "modified": "2026-06-16T16:00:55.400221Z", "relationship_type": "communicates-with", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92cd53da-652b-5d6c-9574-1eb966c8d870", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.400319Z", "modified": "2026-06-16T16:00:55.400319Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ba7c792-6f76-5d4c-af9d-4e41659308f5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.400416Z", "modified": "2026-06-16T16:00:55.400416Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--65ca5aa3-aefc-54d2-ae68-e1d910512d13", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.400521Z", "modified": "2026-06-16T16:00:55.400521Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3290dd08-510b-5eb6-80f6-485e2e5673e8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.400621Z", "modified": "2026-06-16T16:00:55.400621Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2db1a2f9-cc96-5228-8759-57d5b99a0995", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.40072Z", "modified": "2026-06-16T16:00:55.40072Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--daedccec-40ee-51ee-bbde-7ca9394984fe", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.400817Z", "modified": "2026-06-16T16:00:55.400817Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dee84149-597f-5795-b29a-61904a67b644", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.400915Z", "modified": "2026-06-16T16:00:55.400915Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--14e2bd9b-510c-54ca-9106-91b7145aa211", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.401027Z", "modified": "2026-06-16T16:00:55.401027Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6dfde421-25fd-5ae7-bf31-e447b7d9ddf8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.401124Z", "modified": "2026-06-16T16:00:55.401124Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47def7c6-6137-5dca-a589-074f9c01634c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.401222Z", "modified": "2026-06-16T16:00:55.401222Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b273c127-545a-50fe-a217-720d39f1d7d5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.401327Z", "modified": "2026-06-16T16:00:55.401327Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b624783-26ff-56f4-b716-a74619197d5e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.401424Z", "modified": "2026-06-16T16:00:55.401424Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ab9ced35-f57c-5e1b-be70-0341cc62b48d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.401529Z", "modified": "2026-06-16T16:00:55.401529Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cbcc1a8f-a5a7-5232-938c-4d447e41175f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.401638Z", "modified": "2026-06-16T16:00:55.401638Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d5af89f1-338f-595e-8ff0-3f68bc71a112", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.401759Z", "modified": "2026-06-16T16:00:55.401759Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b60e550c-8a38-567a-97cb-209b709f112d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.401856Z", "modified": "2026-06-16T16:00:55.401856Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--00f51a10-ba66-5e82-84e8-d65d6888684b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.401953Z", "modified": "2026-06-16T16:00:55.401953Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c47d00a8-2cde-5f10-8414-fcad8ebc9d9a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.402059Z", "modified": "2026-06-16T16:00:55.402059Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d03f823-b60c-53d8-93c4-3108641a6503", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.402167Z", "modified": "2026-06-16T16:00:55.402167Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18478ca6-7784-51e2-9896-04eae007c0a7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.402291Z", "modified": "2026-06-16T16:00:55.402291Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de3a06d7-625a-5063-bbdc-3e6a3f8f3dd1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.402393Z", "modified": "2026-06-16T16:00:55.402393Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3968a3c1-4df5-5ba7-b5b8-9bbc046d9aa6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.402545Z", "modified": "2026-06-16T16:00:55.402545Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--955c7496-ea7a-5958-a665-d6a0552d40b9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.402686Z", "modified": "2026-06-16T16:00:55.402686Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fcaa704c-767c-5732-b49e-dd0e97b702a8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.402831Z", "modified": "2026-06-16T16:00:55.402831Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f0d6ce95-46db-5bc7-bba3-c555a4e38d45", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.402961Z", "modified": "2026-06-16T16:00:55.402961Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9104a4b5-fcd6-5c2b-a98e-3d4f0b66b98f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.40309Z", "modified": "2026-06-16T16:00:55.40309Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6484691-5ddb-59ee-ac44-a8f72cdd9730", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.403218Z", "modified": "2026-06-16T16:00:55.403218Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3f223617-ba30-5905-8a19-b3589eee7241", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.403343Z", "modified": "2026-06-16T16:00:55.403343Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92ebe8f7-b432-5a95-8579-5f701a72de3e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.403497Z", "modified": "2026-06-16T16:00:55.403497Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dec4254c-9f95-54f7-b607-0a74e5442d86", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.403675Z", "modified": "2026-06-16T16:00:55.403675Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4141473-2e92-5a95-84a6-6215a816d1fb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.403797Z", "modified": "2026-06-16T16:00:55.403797Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5965372-a1bc-51e7-833d-200dfdbe1b1b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.403913Z", "modified": "2026-06-16T16:00:55.403913Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--593f6067-f5cc-515d-8f61-7fa7613b2a9d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.40401Z", "modified": "2026-06-16T16:00:55.40401Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fcec838d-4997-5a7f-8c29-81d93c6e24a7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.404105Z", "modified": "2026-06-16T16:00:55.404105Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b668a04e-14be-5119-abe8-36e4a00ce53a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.404199Z", "modified": "2026-06-16T16:00:55.404199Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3a185c4-2ba5-561c-b34a-95b2f83dffbd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.404294Z", "modified": "2026-06-16T16:00:55.404294Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--90182c46-29c5-5221-9dc5-2f7a75c2b524", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.404388Z", "modified": "2026-06-16T16:00:55.404388Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18dda5fc-4976-5839-8dd9-faf58eaf267c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.404483Z", "modified": "2026-06-16T16:00:55.404483Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--72f2dc56-4e75-5190-ac99-fde0746478ba", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.404591Z", "modified": "2026-06-16T16:00:55.404591Z", "relationship_type": "communicates-with", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4c564ba8-9f6e-51c8-bab2-ebc9c79b4c13", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.404693Z", "modified": "2026-06-16T16:00:55.404693Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dcc3f39b-c306-5aed-9daf-ef9337b2aee8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.404803Z", "modified": "2026-06-16T16:00:55.404803Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2ea35854-2ba7-5133-a6c4-011288eef98c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.404917Z", "modified": "2026-06-16T16:00:55.404917Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ea6dac8a-c584-581b-bde8-24515a2e94fe", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.405024Z", "modified": "2026-06-16T16:00:55.405024Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb26e67e-ff1a-566f-9462-662814f7112d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.405137Z", "modified": "2026-06-16T16:00:55.405137Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--85b67d72-aa2f-524d-b3a6-d4140be62aaf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.405239Z", "modified": "2026-06-16T16:00:55.405239Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f35d5d18-7805-5ad4-b39c-b4583b64dab5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.405334Z", "modified": "2026-06-16T16:00:55.405334Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e29b0c2-4b6a-5f1d-a903-5cf696ad61b9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.405429Z", "modified": "2026-06-16T16:00:55.405429Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d35492f4-8002-5069-80b5-2bfa9cb3a200", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.405528Z", "modified": "2026-06-16T16:00:55.405528Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d6e86c7-0a0c-51c4-bff6-4daaaabdeb1c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.405624Z", "modified": "2026-06-16T16:00:55.405624Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--60051a49-3666-595e-9e46-6c9dbd2f9e8e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.40572Z", "modified": "2026-06-16T16:00:55.40572Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09cf84fe-41ba-5286-8088-b1a1370ec54d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.405816Z", "modified": "2026-06-16T16:00:55.405816Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7aec2a05-0518-5eb7-b15e-8497a54d8396", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.40591Z", "modified": "2026-06-16T16:00:55.40591Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fd689333-1f23-5818-8f8a-db65767d8419", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.406004Z", "modified": "2026-06-16T16:00:55.406004Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ff65a628-433f-5484-b6e7-7218220bd2b2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.406099Z", "modified": "2026-06-16T16:00:55.406099Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e1f12dbe-ab37-519f-a413-01a615257043", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.406192Z", "modified": "2026-06-16T16:00:55.406192Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1d2b2f0e-d413-5605-9324-7c6dadc278fd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.406287Z", "modified": "2026-06-16T16:00:55.406287Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bcc876d5-7f15-553e-bdb3-c7a655433601", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.406381Z", "modified": "2026-06-16T16:00:55.406381Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa8b9b74-5627-50f9-8178-2f5f75670c16", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.406477Z", "modified": "2026-06-16T16:00:55.406477Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--202b82c5-416c-5052-b5f1-35b6a53ed6cf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.406578Z", "modified": "2026-06-16T16:00:55.406578Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8f59fe91-befa-5aff-bd7b-19464a27fc01", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.406673Z", "modified": "2026-06-16T16:00:55.406673Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f1afafd-a6f4-5304-afa4-43c9985cfd96", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.406768Z", "modified": "2026-06-16T16:00:55.406768Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b1afb0a6-5b8e-5486-b272-74a14a7d2fd8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.406863Z", "modified": "2026-06-16T16:00:55.406863Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d4a2870-ea80-5893-8b67-d888804d4ddd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.406957Z", "modified": "2026-06-16T16:00:55.406957Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48201109-92ef-508b-b6c4-5a210e370752", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.407051Z", "modified": "2026-06-16T16:00:55.407051Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7bd6f2e9-ec2a-5027-9bf3-b527b241bfdb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.407146Z", "modified": "2026-06-16T16:00:55.407146Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49f84458-fa9e-5a5e-a9b7-e35439401dce", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.407241Z", "modified": "2026-06-16T16:00:55.407241Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--650dcd78-3a52-5b00-af6b-6b8cf2b40764", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.407336Z", "modified": "2026-06-16T16:00:55.407336Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa202e8c-b74f-5c69-be8a-cb215b119690", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.407431Z", "modified": "2026-06-16T16:00:55.407431Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--323de175-4217-57e1-84f3-346c8f5239a9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.407529Z", "modified": "2026-06-16T16:00:55.407529Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3270b226-91d1-5e27-bff8-e80d7035ae2f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.407624Z", "modified": "2026-06-16T16:00:55.407624Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa06207e-b08e-5e57-a32d-5089484a719c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.407719Z", "modified": "2026-06-16T16:00:55.407719Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--07c23b8a-9033-509d-bf57-49238c773bb1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.407815Z", "modified": "2026-06-16T16:00:55.407815Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c366da2-7457-5c03-882c-6adb7ac78449", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.407908Z", "modified": "2026-06-16T16:00:55.407908Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--581fc19f-c40d-5a9d-9518-28b3be589629", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.408003Z", "modified": "2026-06-16T16:00:55.408003Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1c2e5f3b-5529-583d-a5d8-100169eb91bc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.408098Z", "modified": "2026-06-16T16:00:55.408098Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9106b0e-4dbe-5c43-b320-f4c577dd37f0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.408206Z", "modified": "2026-06-16T16:00:55.408206Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e3cde425-aaaf-5108-8394-3ad8cbf8b70b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.408335Z", "modified": "2026-06-16T16:00:55.408335Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e519985-e2c5-5bed-a8ae-d92d2ef3af0a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.408453Z", "modified": "2026-06-16T16:00:55.408453Z", "relationship_type": "communicates-with", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dcb6c876-8ed5-55f0-9e9f-a9b18f45487a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.408603Z", "modified": "2026-06-16T16:00:55.408603Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31b60644-aa5a-5f0f-8cf7-1e2606f65997", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.408738Z", "modified": "2026-06-16T16:00:55.408738Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--973e6356-63c8-5160-ba37-d213759504e6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.40889Z", "modified": "2026-06-16T16:00:55.40889Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c1d8b008-24c1-533f-9d45-1000eaf28d3e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.40904Z", "modified": "2026-06-16T16:00:55.40904Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8f3f927-7621-50d1-8d0f-0bc3c13f7d57", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.409176Z", "modified": "2026-06-16T16:00:55.409176Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6fc46d2c-229e-5444-a91e-261e096a7bbd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.409312Z", "modified": "2026-06-16T16:00:55.409312Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4cfe29c7-15a4-5bbd-88b0-29aca5927482", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.409477Z", "modified": "2026-06-16T16:00:55.409477Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--02ad8d51-0e5e-5ce4-a858-97cd998f0851", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.409642Z", "modified": "2026-06-16T16:00:55.409642Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e3208e3-8a8a-572a-9ca5-7e74612bb930", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.409792Z", "modified": "2026-06-16T16:00:55.409792Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50cca3df-1e06-5c4d-a0e4-228ff1bfaa40", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.409932Z", "modified": "2026-06-16T16:00:55.409932Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f0aa55a4-f6fc-54e8-aa60-5c675c6db017", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.410059Z", "modified": "2026-06-16T16:00:55.410059Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--74b4ebee-11cb-5e09-afd1-be9dc8cf82dd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.410161Z", "modified": "2026-06-16T16:00:55.410161Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3e03b4a-0174-53ef-b7cf-1a5054962a2e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.410258Z", "modified": "2026-06-16T16:00:55.410258Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4dcc14d-1ad5-5a9d-b561-dc87b9ef47db", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.410354Z", "modified": "2026-06-16T16:00:55.410354Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a61db77-4876-593d-9461-344550312562", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.410449Z", "modified": "2026-06-16T16:00:55.410449Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9a010298-3842-5f8f-89ab-acb7798a849a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.410543Z", "modified": "2026-06-16T16:00:55.410543Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ce6a520-fbc3-5451-b5cf-83decb9026ba", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.410638Z", "modified": "2026-06-16T16:00:55.410638Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9599bb0-69fd-55e6-8918-d911bb92ff26", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.410732Z", "modified": "2026-06-16T16:00:55.410732Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8942c9eb-cd8f-5c17-8851-87dc4eda596d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.410826Z", "modified": "2026-06-16T16:00:55.410826Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47aad43e-f04c-53a7-af65-e2d913f0ac80", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.410922Z", "modified": "2026-06-16T16:00:55.410922Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9bd70a64-4383-50e0-8b7b-32ce0e40c5b7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.411017Z", "modified": "2026-06-16T16:00:55.411017Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cabde7ae-69ff-5017-8429-ef58f602c0a7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.411149Z", "modified": "2026-06-16T16:00:55.411149Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--168d6276-f812-5e3b-b247-e6b6633ba558", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.411245Z", "modified": "2026-06-16T16:00:55.411245Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--576faf64-87de-5009-90bd-c27917f68ca5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.411339Z", "modified": "2026-06-16T16:00:55.411339Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--df781d69-5e52-5073-bfe3-6e22a7de11ad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.411433Z", "modified": "2026-06-16T16:00:55.411433Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c860ffac-3b5d-5f99-a3fe-fa720233a194", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.411528Z", "modified": "2026-06-16T16:00:55.411528Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--936c5da7-6775-56d1-a44b-1a0eee5bb50f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.411622Z", "modified": "2026-06-16T16:00:55.411622Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dadf5693-1de6-52ec-a793-16f259fad226", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.411716Z", "modified": "2026-06-16T16:00:55.411716Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--087548dd-96b9-50a1-8927-4de4c59cefc2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.411811Z", "modified": "2026-06-16T16:00:55.411811Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8af5c79a-77aa-58be-8e25-05d8d41ef338", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.411905Z", "modified": "2026-06-16T16:00:55.411905Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32b4522f-2c3d-590e-bdf8-61eabd9bf455", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.411999Z", "modified": "2026-06-16T16:00:55.411999Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6fe2373c-6b5d-5493-b322-a7dd9fd57e12", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.412109Z", "modified": "2026-06-16T16:00:55.412109Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--949fb67f-9a55-59d6-89f6-abef96f4f4e2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.412214Z", "modified": "2026-06-16T16:00:55.412214Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3cbddd4f-52bc-521c-838c-ca3fe189f0e9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.41231Z", "modified": "2026-06-16T16:00:55.41231Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--78e69769-8da6-557f-bb7f-613b544ab61d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.412404Z", "modified": "2026-06-16T16:00:55.412404Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8fd29e5-2042-5b2a-b518-25448f11f824", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.412498Z", "modified": "2026-06-16T16:00:55.412498Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79871aa2-0e50-53a5-bcc8-bc9bc8bfe56b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.412592Z", "modified": "2026-06-16T16:00:55.412592Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--90fb3596-99ad-5cee-aa84-c60dbc16536b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.412687Z", "modified": "2026-06-16T16:00:55.412687Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a55052da-b328-5fef-a089-665beb1afc24", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.412783Z", "modified": "2026-06-16T16:00:55.412783Z", "relationship_type": "communicates-with", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2357d84-6516-5c0f-8e45-54104fc2e376", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.412878Z", "modified": "2026-06-16T16:00:55.412878Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--144e4246-b540-5135-ad3a-ff9e9d0131a3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.412973Z", "modified": "2026-06-16T16:00:55.412973Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5322ce99-54f8-5d37-b244-1170f195514e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.413072Z", "modified": "2026-06-16T16:00:55.413072Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee1ebf04-c6ff-5afd-986f-bc3558c94872", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.413168Z", "modified": "2026-06-16T16:00:55.413168Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d68cdfef-4b22-547a-87d1-a38588e71989", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.413263Z", "modified": "2026-06-16T16:00:55.413263Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f2fc374b-1938-5993-b125-2d6297ff3661", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.413357Z", "modified": "2026-06-16T16:00:55.413357Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec32b477-df4b-59b0-a6b7-986fcd45541a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.413453Z", "modified": "2026-06-16T16:00:55.413453Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--be086320-f131-5cfe-9819-ca0c82c4e1ba", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.413547Z", "modified": "2026-06-16T16:00:55.413547Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--82e97b90-8357-5088-b40b-32356165c20d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.41364Z", "modified": "2026-06-16T16:00:55.41364Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5edcf862-325a-5261-aa30-2b90f486d4d8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.413736Z", "modified": "2026-06-16T16:00:55.413736Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--604bdd59-d5ab-5fa9-b433-fffc48d634e3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.41383Z", "modified": "2026-06-16T16:00:55.41383Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6624ce40-e819-5b5e-b416-98f067ef0166", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.413924Z", "modified": "2026-06-16T16:00:55.413924Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e0fec190-0697-502d-8f67-95d0827184d2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.414017Z", "modified": "2026-06-16T16:00:55.414017Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--572fcd23-68a2-5ffc-b640-b3d954d0d19c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.414117Z", "modified": "2026-06-16T16:00:55.414117Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--17850287-1d68-5d3d-ae72-8eb574be22fd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.414212Z", "modified": "2026-06-16T16:00:55.414212Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--294e820d-d030-5b32-92fc-490cab605fcd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.41434Z", "modified": "2026-06-16T16:00:55.41434Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e19fd08a-8035-52ab-b7b8-5f59d23be889", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.414459Z", "modified": "2026-06-16T16:00:55.414459Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3c712f6-6a23-5391-b37e-b81d239eed91", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.414563Z", "modified": "2026-06-16T16:00:55.414563Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2001aa1d-7cad-5191-b711-ab68f0256f81", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.4147Z", "modified": "2026-06-16T16:00:55.4147Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c222f4e6-06fa-5bb6-9f56-156f027d0c5a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.414844Z", "modified": "2026-06-16T16:00:55.414844Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4ac2a317-60d5-54eb-98be-32c641ddc6d9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.414957Z", "modified": "2026-06-16T16:00:55.414957Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f05a14a7-8733-5798-972c-91ce11e88982", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.415212Z", "modified": "2026-06-16T16:00:55.415212Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--06820f7d-ed87-56d4-aa41-792e1b88c07b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.415359Z", "modified": "2026-06-16T16:00:55.415359Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--91e54f9f-355b-564e-89bb-78030012ba24", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.41548Z", "modified": "2026-06-16T16:00:55.41548Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--73885385-c1f9-5ddf-8f71-f06c3f7f630b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.415603Z", "modified": "2026-06-16T16:00:55.415603Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--72c8e875-d574-55dd-bdb6-98d2caf8ac87", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.415756Z", "modified": "2026-06-16T16:00:55.415756Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe8d7440-1922-5961-9e4b-5dcc37e92c4e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.415977Z", "modified": "2026-06-16T16:00:55.415977Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b1c052d0-8367-5cff-8a67-63c92b117373", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.416113Z", "modified": "2026-06-16T16:00:55.416113Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fabfdbe7-35e5-58e5-a8e8-35586476f1fd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.416209Z", "modified": "2026-06-16T16:00:55.416209Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3df40ce5-12ee-5d39-bfa6-7ae3c24fa88b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.416304Z", "modified": "2026-06-16T16:00:55.416304Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--975e0156-06f4-5da7-b8d6-04729d14843f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.416399Z", "modified": "2026-06-16T16:00:55.416399Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e88ea0d3-b3b3-5d80-855b-c8cecfd3b18f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.416494Z", "modified": "2026-06-16T16:00:55.416494Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--73a873f4-9c56-5b57-9f18-f9d500906469", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.416588Z", "modified": "2026-06-16T16:00:55.416588Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bc891c8d-6499-58db-85b7-321e4f3dc0b7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.416683Z", "modified": "2026-06-16T16:00:55.416683Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--adfeb6f0-4e5c-5cdd-9554-96d245b12f62", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.416779Z", "modified": "2026-06-16T16:00:55.416779Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9c4147e8-6c94-5a51-a5ac-4a446dd2fb15", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.416873Z", "modified": "2026-06-16T16:00:55.416873Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b63bac8-2ec2-5236-90e1-1b1326b3965a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.416968Z", "modified": "2026-06-16T16:00:55.416968Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ac887039-ee68-588e-87a1-2c2c5304be4d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.41707Z", "modified": "2026-06-16T16:00:55.41707Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7978eb5a-7e5b-5445-81d0-090fc72202c0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.417166Z", "modified": "2026-06-16T16:00:55.417166Z", "relationship_type": "communicates-with", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8fc75895-29fc-547b-9a67-dda08b776c91", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.417261Z", "modified": "2026-06-16T16:00:55.417261Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--649f7b18-8bf6-5791-8cd0-07a52be65143", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.417355Z", "modified": "2026-06-16T16:00:55.417355Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7dd58f0f-c23a-55a2-94a8-0003165fd516", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.41745Z", "modified": "2026-06-16T16:00:55.41745Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--770693c7-d96b-5672-afe2-f392dea6b110", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.417543Z", "modified": "2026-06-16T16:00:55.417543Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fec6b6c8-ca7a-5afe-bea5-3fbee772ce90", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.417637Z", "modified": "2026-06-16T16:00:55.417637Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--59c08785-a2d2-5bbd-bf6c-61063adacdf8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.417731Z", "modified": "2026-06-16T16:00:55.417731Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c65df877-8609-5514-adb7-828baa611361", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.417825Z", "modified": "2026-06-16T16:00:55.417825Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b419d71b-11b1-56ea-b39d-b1e4a93706bb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.417919Z", "modified": "2026-06-16T16:00:55.417919Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7be983e3-6069-588b-b990-c52b38c6ccf4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.418014Z", "modified": "2026-06-16T16:00:55.418014Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3734dd6d-3a70-5b33-a9e6-d5848677e6fb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.418114Z", "modified": "2026-06-16T16:00:55.418114Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de9ae70a-90df-5c63-a244-d3c30f05d629", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.418211Z", "modified": "2026-06-16T16:00:55.418211Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--843fb8c9-611f-5c08-ad2b-8826e9c4cc7c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.418305Z", "modified": "2026-06-16T16:00:55.418305Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eb005ddd-73a3-52a4-977c-a0c996f53ac9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.418401Z", "modified": "2026-06-16T16:00:55.418401Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48f5a633-7c19-5c78-98c6-236324c61b96", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.418496Z", "modified": "2026-06-16T16:00:55.418496Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01aff6b7-04e7-5326-946c-b413f6b056e7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.418591Z", "modified": "2026-06-16T16:00:55.418591Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--da082c11-48ac-5c3f-a970-ea910c44a462", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.418686Z", "modified": "2026-06-16T16:00:55.418686Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5550526e-baec-5539-832f-a65febf5c561", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.41878Z", "modified": "2026-06-16T16:00:55.41878Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c350a7f4-dc72-5e19-b201-e359429072ca", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.418875Z", "modified": "2026-06-16T16:00:55.418875Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f6d66912-59bf-5377-8559-e32f21e9315b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.41897Z", "modified": "2026-06-16T16:00:55.41897Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--34e23f1a-6ffe-5870-b1ff-a855f64f7659", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.41907Z", "modified": "2026-06-16T16:00:55.41907Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fef67009-b694-53c4-b2d3-edf499be4695", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.419165Z", "modified": "2026-06-16T16:00:55.419165Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--371ab67d-4373-596c-a238-2b0a5ddcb816", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.419258Z", "modified": "2026-06-16T16:00:55.419258Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cbec2581-3c7d-5dbb-b739-e37c07d91d15", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.419354Z", "modified": "2026-06-16T16:00:55.419354Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e3f914a2-38cb-5e3c-8329-abe447ed6000", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.419448Z", "modified": "2026-06-16T16:00:55.419448Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5cc83176-62a6-5753-87e5-64ee723f8634", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.419542Z", "modified": "2026-06-16T16:00:55.419542Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e9eff53-54d6-5617-9a4d-30a3f3e06847", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.419635Z", "modified": "2026-06-16T16:00:55.419635Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b61913cb-eb98-5329-8aa9-204845137021", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.419729Z", "modified": "2026-06-16T16:00:55.419729Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d50cf1e5-66a3-5bb1-a635-3c299f563759", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.419824Z", "modified": "2026-06-16T16:00:55.419824Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08acc5f6-cfa8-5419-b002-83bb71d18724", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.419918Z", "modified": "2026-06-16T16:00:55.419918Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--37913099-19fe-5cfa-86f4-780aae05cc91", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.420012Z", "modified": "2026-06-16T16:00:55.420012Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68532b26-708f-5218-b357-6a7eb83b3d51", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.420118Z", "modified": "2026-06-16T16:00:55.420118Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--88844c4e-92c0-54a2-94d0-0358f33f7219", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.420214Z", "modified": "2026-06-16T16:00:55.420214Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50d9e6ed-2f3b-5032-8287-9b8e6c9b724f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.420321Z", "modified": "2026-06-16T16:00:55.420321Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca5d276e-45a0-591f-b29c-5b35018fb052", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.420439Z", "modified": "2026-06-16T16:00:55.420439Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7525f0e8-d2d7-5077-8e82-ccbd4679306e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.420567Z", "modified": "2026-06-16T16:00:55.420567Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--235aa10b-b4f2-530b-9d8e-7fadcd01117a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.420701Z", "modified": "2026-06-16T16:00:55.420701Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47797fa9-5747-5a5a-b01f-069dff4f0cbc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.420837Z", "modified": "2026-06-16T16:00:55.420837Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18b29b03-7a47-590a-abfd-1a38051e600e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.420951Z", "modified": "2026-06-16T16:00:55.420951Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3218452a-cdeb-5c32-ae0d-65e2e65ed58c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.421085Z", "modified": "2026-06-16T16:00:55.421085Z", "relationship_type": "communicates-with", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8134b82-b6fb-54cf-a3da-cf2e633304f1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.421247Z", "modified": "2026-06-16T16:00:55.421247Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b490b48f-7365-53db-bdb5-4b01d8f2096d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.421418Z", "modified": "2026-06-16T16:00:55.421418Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a43cabe3-2330-5b33-9c0b-38eb215c311b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.421604Z", "modified": "2026-06-16T16:00:55.421604Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4405a682-5f14-51b3-8bbc-14946635a8c7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.421755Z", "modified": "2026-06-16T16:00:55.421755Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--74bbc50c-add8-5799-a4e6-d9e87180443c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.421872Z", "modified": "2026-06-16T16:00:55.421872Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e29bd32d-1aaa-57ee-8388-8e0928bd3686", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.42199Z", "modified": "2026-06-16T16:00:55.42199Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1df1d3fb-895f-5056-ae84-8b55ab6fc3e0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.422105Z", "modified": "2026-06-16T16:00:55.422105Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a75c87da-80a6-584b-933e-a9ded6996809", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.4222Z", "modified": "2026-06-16T16:00:55.4222Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cde45747-693b-5fb0-8234-fba16547e060", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.422295Z", "modified": "2026-06-16T16:00:55.422295Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cfc73050-fb2c-54e6-8936-ab77f3ce3324", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.422389Z", "modified": "2026-06-16T16:00:55.422389Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc29fc55-28e9-51a7-8dc1-2c2533603fe3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.422483Z", "modified": "2026-06-16T16:00:55.422483Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1bdd06e-6a20-5160-ac76-63c3763c6b55", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.4226Z", "modified": "2026-06-16T16:00:55.4226Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--abb3c860-2381-5b91-9079-f97172136272", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.422704Z", "modified": "2026-06-16T16:00:55.422704Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--67591528-19ab-5da8-92be-4c7ce33bb0cb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.422799Z", "modified": "2026-06-16T16:00:55.422799Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--db1a1c4f-f515-57e2-8fae-0900f3d07c75", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.422895Z", "modified": "2026-06-16T16:00:55.422895Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c29bd94-46c6-5a89-a446-70557fd2a40a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.422992Z", "modified": "2026-06-16T16:00:55.422992Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4134ea07-c6f3-5260-b64a-71d083a911c9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.423089Z", "modified": "2026-06-16T16:00:55.423089Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--87b08ea8-408a-5c95-a774-994bb4a27e9d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.423183Z", "modified": "2026-06-16T16:00:55.423183Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--642170ea-2f6d-51df-af39-f3b3def35f89", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.423278Z", "modified": "2026-06-16T16:00:55.423278Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a521e1b3-ad81-51ba-b0db-24dd8e2f94e3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.423373Z", "modified": "2026-06-16T16:00:55.423373Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--af5a846e-8a3d-5371-b453-f897adfb2aa9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.423468Z", "modified": "2026-06-16T16:00:55.423468Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7db30453-ee72-556b-8579-f45c372f2b9d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.423567Z", "modified": "2026-06-16T16:00:55.423567Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4636dda9-bf6c-55bb-9043-0c9c62701b75", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.423663Z", "modified": "2026-06-16T16:00:55.423663Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c9b034bc-0ead-5fa4-96c5-1b3b95c113d2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.423758Z", "modified": "2026-06-16T16:00:55.423758Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9c59d203-c0ed-516d-8c84-272420516b3e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.423852Z", "modified": "2026-06-16T16:00:55.423852Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a7320cb-e77a-5f5c-b542-63c69a64e466", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.423946Z", "modified": "2026-06-16T16:00:55.423946Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e09f29c-a7bf-5196-a18e-9c0f5ec1882d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.424041Z", "modified": "2026-06-16T16:00:55.424041Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2a94cca-0ce3-5258-a25d-f13d412c749b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.424136Z", "modified": "2026-06-16T16:00:55.424136Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9ed03c73-9aa9-5fe0-bc40-72c35d74f228", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.42423Z", "modified": "2026-06-16T16:00:55.42423Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18f2b0e7-f86c-5a7a-904d-827db4067737", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.424324Z", "modified": "2026-06-16T16:00:55.424324Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--670a8e4c-83ce-5bf8-ad0c-f99efe30e9cb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.424419Z", "modified": "2026-06-16T16:00:55.424419Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e6b59488-760f-5d5a-8e0e-3ca12cfafb13", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.424513Z", "modified": "2026-06-16T16:00:55.424513Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cd7eaf1e-e4eb-5052-b349-dc9117634907", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.424614Z", "modified": "2026-06-16T16:00:55.424614Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dbee45bb-b4f1-529a-b6ac-86580b3158c8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.424708Z", "modified": "2026-06-16T16:00:55.424708Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b7614a1f-a5e3-57ae-b8b8-acbac9c9f0ba", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.424802Z", "modified": "2026-06-16T16:00:55.424802Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--45abdb1c-90bb-5b2c-bfe7-8ae1c98d9b81", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.424895Z", "modified": "2026-06-16T16:00:55.424895Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--56e4c670-8400-5c9d-8605-eb7b9391fefd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.424989Z", "modified": "2026-06-16T16:00:55.424989Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9d7368d0-1241-5df4-8627-44a25487f17d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.425083Z", "modified": "2026-06-16T16:00:55.425083Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2fc9cbca-f809-5fb4-92ea-13d413affd07", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.42518Z", "modified": "2026-06-16T16:00:55.42518Z", "relationship_type": "communicates-with", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2ba83d4-14a7-52a4-89e5-a2e015d6e8b1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.425275Z", "modified": "2026-06-16T16:00:55.425275Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e423a4ad-82fe-5295-9d43-920657558906", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.42537Z", "modified": "2026-06-16T16:00:55.42537Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2720091e-6be2-578d-828d-88d047e82c53", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.425464Z", "modified": "2026-06-16T16:00:55.425464Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--803b06cd-c33a-5675-af2f-78e4374184b1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.425563Z", "modified": "2026-06-16T16:00:55.425563Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--be3585d0-5571-53c6-a727-8eed56a7a4ee", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.425659Z", "modified": "2026-06-16T16:00:55.425659Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a7deb06-6aec-5133-832b-85a997fc348e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.425753Z", "modified": "2026-06-16T16:00:55.425753Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--055312b8-f3b8-5a70-bacc-c2eb44a01d17", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.425847Z", "modified": "2026-06-16T16:00:55.425847Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dce86aa6-d515-525b-a4b6-81a3779fed91", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.425943Z", "modified": "2026-06-16T16:00:55.425943Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5ece1f5-c01b-5b53-a4b9-ded0fc9fefc1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.426037Z", "modified": "2026-06-16T16:00:55.426037Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79f308e1-b3b7-564c-9f06-f702a71e31c3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.426131Z", "modified": "2026-06-16T16:00:55.426131Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ce79380d-2707-59d2-85c2-9f0784e24707", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.426226Z", "modified": "2026-06-16T16:00:55.426226Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c562f80-9dfa-5896-8d05-a7901054fcb8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.42632Z", "modified": "2026-06-16T16:00:55.42632Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b71e97cd-d30a-54bb-9a9e-9c954dbbec7e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.426429Z", "modified": "2026-06-16T16:00:55.426429Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--33b37618-8b0f-5047-9b1e-dfac233c9710", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.426602Z", "modified": "2026-06-16T16:00:55.426602Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49f223db-17bd-5aff-a4d3-b9601d838b02", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.426732Z", "modified": "2026-06-16T16:00:55.426732Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4afda88-c4be-58c1-a242-1b29c3653dad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.426868Z", "modified": "2026-06-16T16:00:55.426868Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--409823c7-491a-5425-85f4-b8e66fa1d55f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.426984Z", "modified": "2026-06-16T16:00:55.426984Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fec093f9-0ac4-59d9-87aa-7a6b40e55097", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.427129Z", "modified": "2026-06-16T16:00:55.427129Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3394828-95a0-54e1-852a-1bb6c82302c9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.427275Z", "modified": "2026-06-16T16:00:55.427275Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c943f75-1d82-5cd0-b33e-83d9c05c9bf8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.427405Z", "modified": "2026-06-16T16:00:55.427405Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--67189551-ad1f-5581-b2b4-3ac9439935c6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.427534Z", "modified": "2026-06-16T16:00:55.427534Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9a23ada-64ea-5246-9a68-6750fcc27b83", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.427691Z", "modified": "2026-06-16T16:00:55.427691Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e61a975-194f-5bbe-bda2-85daf2ca8e49", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.427852Z", "modified": "2026-06-16T16:00:55.427852Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b448aae-3466-57c2-9571-684e6b82f99c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.427984Z", "modified": "2026-06-16T16:00:55.427984Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ece6e7ee-755c-52f3-b95d-4f67b8a5324c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.42811Z", "modified": "2026-06-16T16:00:55.42811Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3c93c04-38c4-5fce-9dc8-61c9e3ff9f12", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.42821Z", "modified": "2026-06-16T16:00:55.42821Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--607bf7f7-fca7-5068-ae80-f002051b2086", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.428305Z", "modified": "2026-06-16T16:00:55.428305Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9acb1af7-b254-55ed-87ce-4499329bf7e8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.428399Z", "modified": "2026-06-16T16:00:55.428399Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a9247325-67a4-50dc-a947-096d068b30bd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.428495Z", "modified": "2026-06-16T16:00:55.428495Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ae1ed1db-9987-558a-9162-b1419bf67ee3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.428598Z", "modified": "2026-06-16T16:00:55.428598Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eecbfbde-5406-569b-a920-9b098848364b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.428694Z", "modified": "2026-06-16T16:00:55.428694Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2ca729d-f9be-5490-ae33-54a80063a7d7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.42879Z", "modified": "2026-06-16T16:00:55.42879Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--238031b6-65cd-545e-a130-aa9e53c77360", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.428884Z", "modified": "2026-06-16T16:00:55.428884Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2c994d7-f80d-5362-91e3-185893722f7d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.428978Z", "modified": "2026-06-16T16:00:55.428978Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--85654ad8-cccd-524e-9547-388c42700288", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.429072Z", "modified": "2026-06-16T16:00:55.429072Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c325885-2608-5163-be96-fab4f51412cd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.429167Z", "modified": "2026-06-16T16:00:55.429167Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2fcf0bb-0ada-50ab-a98e-cf1addec29f3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.429262Z", "modified": "2026-06-16T16:00:55.429262Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9ca18ba3-17c7-515b-a56a-7f59f22cd43f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.429356Z", "modified": "2026-06-16T16:00:55.429356Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fdbf560b-fcc0-538c-957e-f451f2f5241e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.429452Z", "modified": "2026-06-16T16:00:55.429452Z", "relationship_type": "communicates-with", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b956075-ecbd-52d8-9770-ac2ce63fa314", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.429546Z", "modified": "2026-06-16T16:00:55.429546Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1345c0e-ab00-5d70-8f9d-f757348f326d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.42964Z", "modified": "2026-06-16T16:00:55.42964Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f972b29e-ca45-5567-a41c-3d64327d93ac", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.429735Z", "modified": "2026-06-16T16:00:55.429735Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--918c1482-155c-5cb0-bf3f-bceb58da06fa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.429828Z", "modified": "2026-06-16T16:00:55.429828Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6b316427-db0d-57b2-ac33-a09308a03d9a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.429923Z", "modified": "2026-06-16T16:00:55.429923Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ae63f6e3-c74f-5c3c-b410-4933dfe87bcf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.430017Z", "modified": "2026-06-16T16:00:55.430017Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--282d67c4-688d-56e0-808d-0f320cd4be3b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.430126Z", "modified": "2026-06-16T16:00:55.430126Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7fd9e7a0-24d2-548a-82ff-d70d7bf9fc11", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.430224Z", "modified": "2026-06-16T16:00:55.430224Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8eebb1a8-f68b-5d7c-acab-0dfa667eef7c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.430318Z", "modified": "2026-06-16T16:00:55.430318Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4120c398-c0ce-53e5-9432-adf4073523a3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.430413Z", "modified": "2026-06-16T16:00:55.430413Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48140511-ce2d-545b-aaec-2f6bd4603d77", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.430508Z", "modified": "2026-06-16T16:00:55.430508Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2bd1f726-7175-56c8-ba13-8a3ac4e6167e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.430602Z", "modified": "2026-06-16T16:00:55.430602Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--829ebd2c-acb3-5b71-aeb9-3f3e5fae5d7a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.430696Z", "modified": "2026-06-16T16:00:55.430696Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--edc10bbe-5860-5c13-9dc1-befd2fef6785", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.43079Z", "modified": "2026-06-16T16:00:55.43079Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b8a33139-bb55-5af1-8f46-6435e136ce6b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.430886Z", "modified": "2026-06-16T16:00:55.430886Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8af0377a-0bb2-5483-8ac8-8656c4588430", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.430979Z", "modified": "2026-06-16T16:00:55.430979Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--752a9126-22c6-5415-98ad-fd8e6f1b19b4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.431149Z", "modified": "2026-06-16T16:00:55.431149Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--03f831f8-f551-59a0-a797-d2dd4bc6be0d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.431281Z", "modified": "2026-06-16T16:00:55.431281Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--90f0606e-c6f6-5358-a304-21c8d46c78f3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.431387Z", "modified": "2026-06-16T16:00:55.431387Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8f86b1ae-98cb-59a0-8fc3-7ac8f5816f1d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.431485Z", "modified": "2026-06-16T16:00:55.431485Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--089dc294-fdb0-5e90-908a-8de0160a4a78", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.431581Z", "modified": "2026-06-16T16:00:55.431581Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e1f05079-34da-55e2-8c35-bad4ab35a899", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.431677Z", "modified": "2026-06-16T16:00:55.431677Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--852e8665-a250-5ad7-878b-a56bb01dd3c0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.43177Z", "modified": "2026-06-16T16:00:55.43177Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b044e771-2f95-534a-9473-be9acb00f77c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.431867Z", "modified": "2026-06-16T16:00:55.431867Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d045074d-af2b-5e87-ba2e-8f93e53755b4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.431962Z", "modified": "2026-06-16T16:00:55.431962Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9f3cd811-0124-5f33-99da-64d217d0801b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.432063Z", "modified": "2026-06-16T16:00:55.432063Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cbcd49ea-1384-5bd4-89d2-9966ae647497", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.432161Z", "modified": "2026-06-16T16:00:55.432161Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e99932d4-2a59-5396-9dc0-36b9ebfd950a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.432255Z", "modified": "2026-06-16T16:00:55.432255Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--532c1278-e2b5-5e5d-9c62-9ca97fbea257", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.432351Z", "modified": "2026-06-16T16:00:55.432351Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e4cc299-f5ec-59d2-8da9-c5aecc3f43e3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.432457Z", "modified": "2026-06-16T16:00:55.432457Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e9897a5-626e-5ccb-b06a-65435b3eee31", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.43258Z", "modified": "2026-06-16T16:00:55.43258Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--826e800e-822e-50b3-b82f-1616169bed79", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.432691Z", "modified": "2026-06-16T16:00:55.432691Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c96608f-5e56-56d4-94fb-6ee2023dd3af", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.432858Z", "modified": "2026-06-16T16:00:55.432858Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fff1541b-2476-55e4-a728-ab971db7611f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.432969Z", "modified": "2026-06-16T16:00:55.432969Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5f9135fc-5746-5641-90c1-42cbdcc6f86e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.433126Z", "modified": "2026-06-16T16:00:55.433126Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01dc40a3-107f-5e04-8887-4e308484df78", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.433294Z", "modified": "2026-06-16T16:00:55.433294Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--60f0c03b-c14d-52c8-818b-dd2365e5afaf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.433426Z", "modified": "2026-06-16T16:00:55.433426Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20348f87-d27b-5032-bcb8-5088723e5b85", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.433589Z", "modified": "2026-06-16T16:00:55.433589Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--970d59af-c91f-53ca-992f-a5780e3e1e4f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.433723Z", "modified": "2026-06-16T16:00:55.433723Z", "relationship_type": "communicates-with", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c5aa696-5d01-55cc-931a-30cb4b85963f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.433871Z", "modified": "2026-06-16T16:00:55.433871Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5412de4d-58dc-59f6-a5d2-98a016031124", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.434027Z", "modified": "2026-06-16T16:00:55.434027Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a0be9735-bc91-5a7d-8bf5-32f30d4a9ab1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.434154Z", "modified": "2026-06-16T16:00:55.434154Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1eade736-b54c-51e0-8bf1-42be95663689", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.434272Z", "modified": "2026-06-16T16:00:55.434272Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c19a7c74-5896-57be-83b1-a688bdd56718", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.434378Z", "modified": "2026-06-16T16:00:55.434378Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5dbd7585-85d2-5810-a3aa-09d3affd4f82", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.434473Z", "modified": "2026-06-16T16:00:55.434473Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8033d822-0d64-573d-990b-665845c116c7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.434569Z", "modified": "2026-06-16T16:00:55.434569Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--62d664bc-e1c8-54d5-93d3-a7fa0b8d1cc6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.434665Z", "modified": "2026-06-16T16:00:55.434665Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2a3eb5a-cc9a-534a-b2f8-5cce03b3661e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.434759Z", "modified": "2026-06-16T16:00:55.434759Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1be38997-5804-5ba8-9907-3a7fbf69e3a0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.434853Z", "modified": "2026-06-16T16:00:55.434853Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4d23ead-7d10-53e7-8a1c-bc36f5b5bee7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.434948Z", "modified": "2026-06-16T16:00:55.434948Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c9942ae1-7b8c-51c8-9bcc-60718cba045b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.435048Z", "modified": "2026-06-16T16:00:55.435048Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb9e9a8e-4856-5411-85bd-40300db2dd62", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.435155Z", "modified": "2026-06-16T16:00:55.435155Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0fa7bf77-4cc6-5edf-b964-ecfd2e5595cd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.435253Z", "modified": "2026-06-16T16:00:55.435253Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--512cf649-58be-5823-bed4-4a04f1e468b2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.435358Z", "modified": "2026-06-16T16:00:55.435358Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4cb3f716-94ee-5e03-a8cc-a27ebddd2623", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.435457Z", "modified": "2026-06-16T16:00:55.435457Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e87863d-bbcf-571c-bb26-4d444f7c451f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.435558Z", "modified": "2026-06-16T16:00:55.435558Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--565ee435-a068-5d60-acf0-5f525ce3a501", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.435652Z", "modified": "2026-06-16T16:00:55.435652Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c34b304-e532-54e5-9899-9e52de2045e6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.435746Z", "modified": "2026-06-16T16:00:55.435746Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--58251c99-a3e1-586a-a92a-649302c51e29", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.435841Z", "modified": "2026-06-16T16:00:55.435841Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a563eeb0-5a6b-559a-9412-f0e6a6fcec5b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.435936Z", "modified": "2026-06-16T16:00:55.435936Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d72a659f-aa94-5d54-83d2-adcec959b763", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.436029Z", "modified": "2026-06-16T16:00:55.436029Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97722bfd-c663-57a8-83cb-538d69062c88", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.436136Z", "modified": "2026-06-16T16:00:55.436136Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--285437f5-f672-5da1-86d5-6918cf5cb369", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.436231Z", "modified": "2026-06-16T16:00:55.436231Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--841225a3-6376-550a-b216-339df99cd7d1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.436327Z", "modified": "2026-06-16T16:00:55.436327Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c4fcaec5-d332-591a-ba9d-1b03b71d92fa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.436421Z", "modified": "2026-06-16T16:00:55.436421Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4a54cb94-9cd5-5040-abdc-6285686deb5c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.436516Z", "modified": "2026-06-16T16:00:55.436516Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--24066619-f7de-5502-b4bc-644bff80d61e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.436609Z", "modified": "2026-06-16T16:00:55.436609Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--922eec99-be97-5b94-9382-e608c761254b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.436704Z", "modified": "2026-06-16T16:00:55.436704Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--359b5614-c088-57ae-aef7-47eccf97b34c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.436799Z", "modified": "2026-06-16T16:00:55.436799Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--576d7247-6dd4-5794-a230-72f0f1660b25", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.436974Z", "modified": "2026-06-16T16:00:55.436974Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ddf7a79f-a9d0-50a0-b562-2b9e16a28be6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.437076Z", "modified": "2026-06-16T16:00:55.437076Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec568770-bdb5-5744-a904-821b55a6e240", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.437172Z", "modified": "2026-06-16T16:00:55.437172Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f6902c20-3cf4-5be9-82ae-3851121bdc6c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.437266Z", "modified": "2026-06-16T16:00:55.437266Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--75dc0f18-96dc-5900-bf39-36e94298a66c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.437361Z", "modified": "2026-06-16T16:00:55.437361Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e691f130-ce44-5e4a-af58-8d9854c40f73", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.437456Z", "modified": "2026-06-16T16:00:55.437456Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--817090c1-95b6-59fd-90c9-fbaa35193add", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.43755Z", "modified": "2026-06-16T16:00:55.43755Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6da619fe-6511-52c6-b480-fdef35827738", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.437644Z", "modified": "2026-06-16T16:00:55.437644Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b1bbea78-9058-571a-a962-f8f1bb7aece6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.437739Z", "modified": "2026-06-16T16:00:55.437739Z", "relationship_type": "communicates-with", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--55a39792-555c-5c65-a332-faa795290c04", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.437835Z", "modified": "2026-06-16T16:00:55.437835Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1abe4260-bd40-5cc3-9cff-aebb273db545", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.43793Z", "modified": "2026-06-16T16:00:55.43793Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bbd67fe5-5493-5891-8b79-1c0d32d947c4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.438024Z", "modified": "2026-06-16T16:00:55.438024Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca24b97d-d5b7-5ae9-86e2-45d11b9227fa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.438123Z", "modified": "2026-06-16T16:00:55.438123Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2b0898f-0157-58e5-8bc4-ae8f54f1cfa2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.438219Z", "modified": "2026-06-16T16:00:55.438219Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49b083c8-3e0a-52d9-b5c0-de910e630f36", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.438312Z", "modified": "2026-06-16T16:00:55.438312Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5bbb5b7f-0e96-5217-8b12-b8b081ec819e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.438407Z", "modified": "2026-06-16T16:00:55.438407Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e128330-56ab-51b0-a2b7-618bcae329be", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.438513Z", "modified": "2026-06-16T16:00:55.438513Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2233e2a2-3b64-5118-aa50-dd6cf85256fb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.438633Z", "modified": "2026-06-16T16:00:55.438633Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cee27a48-9ca4-5dba-905f-b849b21f1099", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.438739Z", "modified": "2026-06-16T16:00:55.438739Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a96c8687-7efa-5414-be14-8f27c7c8b25d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.438858Z", "modified": "2026-06-16T16:00:55.438858Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--946fd93d-5c3d-51b5-8a1a-ed0b945ff58c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.438993Z", "modified": "2026-06-16T16:00:55.438993Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d20a7d94-9e94-58cd-92e2-a88969bf8d81", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.43913Z", "modified": "2026-06-16T16:00:55.43913Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bec86933-f0bc-5325-8c72-6e806029ae0a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.439292Z", "modified": "2026-06-16T16:00:55.439292Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--13fd6f93-e992-5fc5-ba73-d946ebf2b23e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.439442Z", "modified": "2026-06-16T16:00:55.439442Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4974ce2f-dae9-5dfe-9c58-892fb69e8ad2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.439569Z", "modified": "2026-06-16T16:00:55.439569Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c91b2ead-43a1-5fd0-bfd0-94b16c135c8f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.439717Z", "modified": "2026-06-16T16:00:55.439717Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48287bbd-87c9-5e79-a967-307c5ef175e0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.439869Z", "modified": "2026-06-16T16:00:55.439869Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b7526af-10ce-5052-9810-498cca1ef4d3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.440041Z", "modified": "2026-06-16T16:00:55.440041Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2cf185e8-0f1d-5e3b-980d-9e13f9cd7771", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.440197Z", "modified": "2026-06-16T16:00:55.440197Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--594d0a54-ba24-5496-af28-056d6407f854", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.440324Z", "modified": "2026-06-16T16:00:55.440324Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e0057b74-3276-5522-be3a-2f41d513782c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.440423Z", "modified": "2026-06-16T16:00:55.440423Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--864bc1e5-3f01-5ad6-86c4-6d21b7d294bc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.440518Z", "modified": "2026-06-16T16:00:55.440518Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0791fc95-56e4-5445-a889-849e2863d537", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.440621Z", "modified": "2026-06-16T16:00:55.440621Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--869b8cd8-d486-5840-9116-6b216d9b2703", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.440719Z", "modified": "2026-06-16T16:00:55.440719Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64576abf-e657-5464-a32c-fcb498cb3953", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.440814Z", "modified": "2026-06-16T16:00:55.440814Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1d0298ae-4a66-5598-9b54-14bdbc98bcb6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.440909Z", "modified": "2026-06-16T16:00:55.440909Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--15d1ddee-af46-5925-bc46-2b83c6117737", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.441005Z", "modified": "2026-06-16T16:00:55.441005Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3f4f8367-d3a1-5298-81a5-d7f068e998cb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.441107Z", "modified": "2026-06-16T16:00:55.441107Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6af3bb0f-cf4b-5457-af32-a6364f94ad49", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.44123Z", "modified": "2026-06-16T16:00:55.44123Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d6a00084-22b4-55fd-aadc-ad31ea301bf6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.441336Z", "modified": "2026-06-16T16:00:55.441336Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b0c5e85c-3b5c-5586-8135-7e371ef3973f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.441436Z", "modified": "2026-06-16T16:00:55.441436Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--13668a24-d044-5d86-a055-1d2574f3c592", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.441531Z", "modified": "2026-06-16T16:00:55.441531Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--23ac6f91-8b73-57f7-8586-073b0ec34f0e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.441671Z", "modified": "2026-06-16T16:00:55.441671Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9f9af60f-a685-56ce-abcf-59904fd56640", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.441768Z", "modified": "2026-06-16T16:00:55.441768Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2c0f5229-0407-559a-841d-50f0033083de", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.441863Z", "modified": "2026-06-16T16:00:55.441863Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--84509407-3d63-5a04-96b3-805f2c53c01b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.441957Z", "modified": "2026-06-16T16:00:55.441957Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48b9c333-db21-5a3c-886b-45995b31d57f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.442052Z", "modified": "2026-06-16T16:00:55.442052Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cab71eee-de79-5c65-b1c9-6fca7baa54ef", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.442148Z", "modified": "2026-06-16T16:00:55.442148Z", "relationship_type": "communicates-with", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--65e78946-f31e-5e5a-bd78-59ad4d6a68f1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.442243Z", "modified": "2026-06-16T16:00:55.442243Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a5c91c1-e3c4-56c4-80da-7aed72ea638a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.442338Z", "modified": "2026-06-16T16:00:55.442338Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--14e4f738-a592-53d0-ae7c-3ebf4d53df9d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.442433Z", "modified": "2026-06-16T16:00:55.442433Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--700ac56c-98cc-587c-8cd4-d3f13ecf190b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.442526Z", "modified": "2026-06-16T16:00:55.442526Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e284984-436c-59f6-bf45-52ab54671d9a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.442626Z", "modified": "2026-06-16T16:00:55.442626Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--516e85a9-2a26-5df3-8fcd-73ef2d32d0bf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.44272Z", "modified": "2026-06-16T16:00:55.44272Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee7215f3-7d4c-596a-a244-fe6ec50ba7f0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.442814Z", "modified": "2026-06-16T16:00:55.442814Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0cc36883-8ee6-532e-a96b-fcc3bb5bc354", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.442909Z", "modified": "2026-06-16T16:00:55.442909Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8655f635-2b64-5c0e-85a2-ff0dc98defb8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.443005Z", "modified": "2026-06-16T16:00:55.443005Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--21027593-add7-53d9-aa9d-22577137b8f4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.4431Z", "modified": "2026-06-16T16:00:55.4431Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6d1a9d77-91ec-58cd-b2d1-f3d43a50b45a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.443193Z", "modified": "2026-06-16T16:00:55.443193Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e0c23d9-a356-5eaf-8219-7db10c882870", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.443288Z", "modified": "2026-06-16T16:00:55.443288Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c296c5fa-2419-556a-87f4-cd956c4856e1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.443382Z", "modified": "2026-06-16T16:00:55.443382Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--939d8ed8-41d9-5ef1-b560-e87cd63b7c70", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.443477Z", "modified": "2026-06-16T16:00:55.443477Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e865d8fd-609e-579d-be17-563e79b28962", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.443578Z", "modified": "2026-06-16T16:00:55.443578Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--283bd16c-3d95-54fa-b983-0fa41d314dd2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.443677Z", "modified": "2026-06-16T16:00:55.443677Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f2af185-2584-595a-9c03-da8ce07a32a9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.443773Z", "modified": "2026-06-16T16:00:55.443773Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--00180e51-1ec4-524a-9db1-3dbde615c03e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.443869Z", "modified": "2026-06-16T16:00:55.443869Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--94bb4ebc-ec35-5dd9-97d1-aa0bc7936620", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.443965Z", "modified": "2026-06-16T16:00:55.443965Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6b14ad00-5812-5f96-b64c-f2ebd537315a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.444061Z", "modified": "2026-06-16T16:00:55.444061Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20ee74c6-2c05-5d69-af45-4d44c3f761ae", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.444155Z", "modified": "2026-06-16T16:00:55.444155Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--04e8cc11-bb8b-5466-8d9b-b44eb08cc0bb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.44425Z", "modified": "2026-06-16T16:00:55.44425Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cdc1280d-bdf4-5e20-abcb-3af4a676d992", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.444344Z", "modified": "2026-06-16T16:00:55.444344Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1bcc0c99-9961-58dc-9f4a-274deaa58c0e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.444438Z", "modified": "2026-06-16T16:00:55.444438Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20a87817-2fae-5119-a837-b4d80e74e5c8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.444533Z", "modified": "2026-06-16T16:00:55.444533Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0cfe00d0-7af4-5dc6-8586-4984a956a544", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.444665Z", "modified": "2026-06-16T16:00:55.444665Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4a34f757-9d57-571b-ab24-1c361343ca30", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.444779Z", "modified": "2026-06-16T16:00:55.444779Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bfcea76f-9a61-5d9f-8edd-7ee2b759c8ec", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.444897Z", "modified": "2026-06-16T16:00:55.444897Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b9f06e0f-002b-562c-baff-5f73f2468ed3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.445014Z", "modified": "2026-06-16T16:00:55.445014Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--435974a2-f08f-5c28-8a8f-e57be15f5b5b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.445154Z", "modified": "2026-06-16T16:00:55.445154Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8e5b146-b87b-542c-a376-3971cd70c394", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.445284Z", "modified": "2026-06-16T16:00:55.445284Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a7a322d-f180-509c-9925-b2f7e2f54cf0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.445414Z", "modified": "2026-06-16T16:00:55.445414Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f3176dab-1e17-5abd-92ae-3fee63730c11", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.445542Z", "modified": "2026-06-16T16:00:55.445542Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d64eb4f0-4fbd-51f3-aee0-b91e4ee0deb6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.445675Z", "modified": "2026-06-16T16:00:55.445675Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a8d09c91-c335-5cb2-b971-221cdc53cc80", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.445823Z", "modified": "2026-06-16T16:00:55.445823Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3389ca8-294b-5b3f-af66-4ae005015753", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.445967Z", "modified": "2026-06-16T16:00:55.445967Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4620be8d-d5ce-5c18-89bc-93e7a54a5b9c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.446075Z", "modified": "2026-06-16T16:00:55.446075Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc9d104e-3f66-597c-9af3-352703ac1b69", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.446183Z", "modified": "2026-06-16T16:00:55.446183Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f3dbb2fc-5f8e-5bb7-aa4d-4f6bd33e5a99", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.446288Z", "modified": "2026-06-16T16:00:55.446288Z", "relationship_type": "communicates-with", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1633fe8a-2ba2-5084-8707-8c110d02eade", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.446384Z", "modified": "2026-06-16T16:00:55.446384Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f7a8b43-6953-5fcf-8726-1c1cd00820fc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.446479Z", "modified": "2026-06-16T16:00:55.446479Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2e8cf6d-ea50-5fe0-b4ef-aa0b2e6014ee", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.446599Z", "modified": "2026-06-16T16:00:55.446599Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50f37172-9da5-52d4-96dd-a6b93fd8e9f2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.44681Z", "modified": "2026-06-16T16:00:55.44681Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--61695452-7e60-5d5c-a5ed-2bcc745e762c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.446939Z", "modified": "2026-06-16T16:00:55.446939Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--260be228-0129-5f9b-a94e-c10825c6f388", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.447037Z", "modified": "2026-06-16T16:00:55.447037Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9a6feea-1c7b-56d8-84cc-6bd6fbc96049", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.447132Z", "modified": "2026-06-16T16:00:55.447132Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1a5d4784-c8e1-5a17-96e5-acc0ea6d6c2a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.447228Z", "modified": "2026-06-16T16:00:55.447228Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--816a9a90-f0c0-5348-8952-4bc5d1f4ac5c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.447324Z", "modified": "2026-06-16T16:00:55.447324Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a59eaada-88ce-5234-8809-058e99ad5659", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.44742Z", "modified": "2026-06-16T16:00:55.44742Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e18a8f5-04ba-520b-8a83-d70abef14135", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.447516Z", "modified": "2026-06-16T16:00:55.447516Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79f2e911-b3fe-5a01-8bd6-99d2fc221f87", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.447618Z", "modified": "2026-06-16T16:00:55.447618Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c403f4dd-d728-5786-921e-0305f6a0d02e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.447714Z", "modified": "2026-06-16T16:00:55.447714Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--164561aa-8586-52db-9da1-20b8f87148fd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.44781Z", "modified": "2026-06-16T16:00:55.44781Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cf429da7-9934-57d3-b3ba-25a4062f1b0b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.447907Z", "modified": "2026-06-16T16:00:55.447907Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca929b44-f7fa-56a7-b485-e59f0d8a82c3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.448001Z", "modified": "2026-06-16T16:00:55.448001Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa725def-45a2-5e23-90bf-588cf5491bd1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.448096Z", "modified": "2026-06-16T16:00:55.448096Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b41ae52b-4cde-5ad6-80ac-e84675ebeedc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.448191Z", "modified": "2026-06-16T16:00:55.448191Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9736aa2-88d4-5da9-94a0-00a1ebc24439", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.448286Z", "modified": "2026-06-16T16:00:55.448286Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eb260b2e-6d15-5941-bd7b-51bd227d19cb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.448381Z", "modified": "2026-06-16T16:00:55.448381Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1a6056d-0326-51a8-9388-60d3032c8564", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.448474Z", "modified": "2026-06-16T16:00:55.448474Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b266df4e-50aa-530e-83d0-22c8b0740fb7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.448586Z", "modified": "2026-06-16T16:00:55.448586Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc9129a0-28bd-5ec6-98f2-ead89ebf345d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.448684Z", "modified": "2026-06-16T16:00:55.448684Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c68bd546-be05-5c21-a84d-25f117fa966a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.448779Z", "modified": "2026-06-16T16:00:55.448779Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8abba56-2670-55a5-ae4d-e8f4cf70d170", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.448875Z", "modified": "2026-06-16T16:00:55.448875Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f57a89f3-8b3e-5788-b1df-77aa0115c37a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.448969Z", "modified": "2026-06-16T16:00:55.448969Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--17ea6306-d31a-51f4-b471-cbb761387553", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.449066Z", "modified": "2026-06-16T16:00:55.449066Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b118382f-3c9d-5dfb-b05a-9e6f585767b6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.449161Z", "modified": "2026-06-16T16:00:55.449161Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e41f78e5-e2c6-5fe7-a7f3-6ee42305118e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.449256Z", "modified": "2026-06-16T16:00:55.449256Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1bffc7ef-6062-589f-94d3-f5162e70a6d1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.44935Z", "modified": "2026-06-16T16:00:55.44935Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--917366c8-04eb-5966-b33c-c0f9f90220fe", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.449445Z", "modified": "2026-06-16T16:00:55.449445Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0edf86fa-6c33-563c-b44f-2855cc0c3bda", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.44954Z", "modified": "2026-06-16T16:00:55.44954Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--606dfaf8-0048-5172-ad38-42825605994b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.449634Z", "modified": "2026-06-16T16:00:55.449634Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--998b61ff-bb66-52a6-8890-19db5702abc9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.44973Z", "modified": "2026-06-16T16:00:55.44973Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--38bda41f-f26f-5abd-b9d8-c275e3b03ca1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.449824Z", "modified": "2026-06-16T16:00:55.449824Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3afedd08-6e8c-5b21-83bc-39a5726168a5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.449917Z", "modified": "2026-06-16T16:00:55.449917Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f33f441c-80eb-550e-87cb-264d252c8701", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.450012Z", "modified": "2026-06-16T16:00:55.450012Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8f27cdb0-6629-572d-b3b1-d009854d8fcc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.450124Z", "modified": "2026-06-16T16:00:55.450124Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--554c3d7d-1467-52fa-882b-abd29e116dd2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.450228Z", "modified": "2026-06-16T16:00:55.450228Z", "relationship_type": "communicates-with", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1287a1f8-8992-529e-b306-b9c90aa3a587", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.450326Z", "modified": "2026-06-16T16:00:55.450326Z", "relationship_type": "related-to", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "tool--c56f982b-3d7f-5540-91f5-8575d8315c67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "report", "spec_version": "2.1", "id": "report--9aa555ca-d9d6-51c3-8af0-af351596d438", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-16T16:00:55.450748Z", "modified": "2026-06-16T16:00:55.450748Z", "name": "GHOST Cryptojacker Kit Family \u2014 Vova75Rus Kit-Author Supply Chain", "report_types": [ "threat-report" ], "published": "2026-05-25T00:00:00Z", "object_refs": [ "ipv4-addr--7f6daaa1-cf23-5900-8670-4f3d89e74332", "indicator--31de5704-b9f1-5a38-af29-a1d3c16f093c", "ipv4-addr--01667cb8-3c97-5586-8e24-d27194d922d8", "indicator--25c06a59-d267-5c27-92e7-73c12559f225", "url--710664e2-c100-579c-92b0-7d120ff87ba7", "indicator--da981557-2e76-5cd5-8b5d-2bd5321fa1cc", "url--fb08fc1b-bf12-5815-9f7c-acacad2e6b6d", "indicator--5f5b0e7e-a2e8-55be-b77c-86662db1b49e", "url--38223062-c1b6-5c69-938f-92b01becee18", "indicator--b821c58f-d17a-584d-ab7c-9660f78c3c73", "url--37c09452-19ee-53ee-b8bc-dc1145aa5e9c", "indicator--535731ea-77f8-59b0-b15c-63019ff12479", "url--b131345f-7f2f-5629-84a3-138177737c64", "indicator--0a40092b-291d-5d74-9d5c-c9b9e23e083e", "url--641cf062-6586-5e27-adee-ae9e5b174696", "indicator--3924a79f-39ad-51dd-b8e2-43ac4f8ee54c", "url--b1907458-d5db-593f-bdde-3c899a809ed5", "indicator--2942f30a-88a9-5385-8e95-065c37786c43", "url--f385c410-27a7-53ae-b673-1b92031d9d9a", "indicator--a75c5beb-93b4-504f-b0cb-ba40949b8932", "url--9e8596d0-361b-599c-9bbc-458c3773557e", "indicator--63081f19-a1d6-5053-a4b2-c426db9e40fb", "url--4acee241-266a-50cc-9d29-0e06d15a1c33", "indicator--e24d7444-2d05-5cd9-b339-d3c1e963dcef", "url--2a3bd9ca-4e0b-5468-a083-31229ebc07d5", "indicator--f53751be-9c3c-5867-82e8-1940fb262b2e", "url--5ce4450b-b005-5587-85a6-c9a7574f14d4", "indicator--e2ad61c2-820a-5176-9fe0-7dfe67f6b6e8", "url--aae4b515-0ce3-5820-84f2-f4e1c6bef4e4", "indicator--945c4ea1-5c16-55c9-a98c-dee7d2dfb993", "url--b15e151a-3c62-58d4-9ec8-4a8588c577bc", "indicator--3465630b-25cc-50fa-a9a4-bb1e2b64aa0a", "url--7b8c1702-71ea-5555-a9f7-5eee08bbf2c5", "indicator--5e0a3104-cc85-5091-9437-f5795d2171b1", "url--4170286d-e8df-54f7-b26b-2f3fd4c5313d", "indicator--fd9b3cb2-de6e-5d1c-aec2-f8bd892dda95", "url--ab9e7e34-9ca1-50c7-8617-b08ee5919040", "indicator--861ba2a9-51e3-5eaa-b24c-6466bdc41ba9", "url--38324a9f-4ac7-5c84-95ec-361a4498a520", "indicator--44cedbec-2e5d-5a2b-9083-7412f44334e6", "domain-name--e7840786-a916-5c8a-8589-f22ec7832462", "indicator--3b717480-1786-5beb-ab11-5c180da3de1d", "domain-name--de3fa8dc-f23c-50c3-b544-0490ba3b86d4", "indicator--f45acd05-fede-5fa5-94ac-1cd78a421f2f", "domain-name--efa8dec6-16fc-5a4c-b899-a9661108b910", "indicator--ed1a4e8c-f8a4-5f4b-9385-23fe8ac3cf03", "domain-name--73087b89-df73-57b6-8b83-19d276c39d28", "indicator--4ba05cb5-2063-59d1-8c76-2a9f0848f359", "domain-name--f59c038d-17eb-5db9-a047-536271a7f8cc", "indicator--c15d88ec-6a0d-5f85-bd50-d10c77034938", "domain-name--5324675a-95fe-57ae-8d68-92d935706860", "indicator--a978e77e-35c9-576d-8d1e-1b7aba19eadb", "domain-name--599c408e-c4d7-5666-bb98-73a1064b0072", "indicator--037e9e3d-33d6-57f8-8bd9-5b090cda4228", "domain-name--30251869-4ef6-5d4b-9c03-9105e254850f", "indicator--3ed50382-45c7-52b0-81e0-a540fa4f7a77", "domain-name--02144e04-ed1d-5db8-bf2c-a8a02deced9e", "indicator--37baa463-4490-5942-858f-af4e9a013dbd", "domain-name--4e57536f-d092-56e5-8063-c68b54fc8340", "indicator--e1ed5be4-63e1-5abe-bc83-1c52bc8772dc", "file--49b1373f-d0d7-5e0d-b693-d306200931b4", "indicator--be07cd65-95b6-5ca4-8279-d70ba1dd7dad", "file--abfe340a-6db0-5e91-8192-b6b28dc7a151", "indicator--6d1bc44e-fe7e-5313-9aae-cffcd26c0997", "file--e9a30230-8d34-538d-99b3-36dcb416f146", "indicator--3dfaa4d5-4638-5546-9b78-e5e5a0f551b4", "file--83333950-4b98-5d26-9a67-44f8e641e1e1", "indicator--876ea16b-5804-5690-85ee-684bad2f221e", "file--52c73e5e-98c8-5ea5-beb4-bfbde3847c21", "indicator--f1cd66d6-553a-5791-a654-204dd2e3a85b", "file--3f3f0d01-7638-511e-bfc0-334e1600087f", "indicator--6e1517d0-ebed-56bf-ab6a-dbb1dc8a8021", "file--d69636b5-9b6c-578f-8be2-698aaeacfca3", "indicator--616d755d-07d1-53b4-9af7-ceff7dff37e7", "file--1a81de11-5521-5e95-be17-94ff0c5329eb", "indicator--0b2abd83-408d-5507-b85e-bbffaaa202e7", "indicator--346e9bdf-0129-5bc8-9ecc-27f99e556375", "indicator--cca2fb59-54ea-5f41-b885-b4da230895bd", "indicator--f4470d02-406f-5e86-8aad-0afb255bc3ad", "indicator--4d021958-4d7d-5ffe-8031-6ebb99e5279e", "indicator--20314fe5-2964-5a0b-9286-1ed16f20a4e1", "indicator--b0714b6a-4db0-5a45-9c49-15f15226df6b", "indicator--07bfb3d0-8f9f-5216-8a80-1a52264e3174", "indicator--dce86bf3-3e8c-506b-ae70-83f378e532d6", "indicator--dc398181-7638-5fc5-848c-8a9407611ecd", "indicator--a484fc2f-55e0-5e06-9140-470c6da5d93f", "indicator--a1f7f480-7372-5967-950f-f5d9b8c4728c", "indicator--5956f922-e13f-5a7e-962b-b6d0f2d499b8", "indicator--dd426046-b829-5738-a534-c30e0544e2b4", "indicator--4830f397-c0dd-50a8-b90e-01e4db884669", "indicator--05262831-7511-5d83-80e8-9e22bdba13f6", "indicator--079cc0b7-e5d8-513f-9185-4fd813aa9bac", "indicator--22c98b80-f90c-5a4c-84f8-0970ef3cfb20", "indicator--787f82f6-889c-5924-9474-a2e3926991d6", "indicator--e8186bd0-ac67-53fe-a60b-9a9005051c93", "indicator--4f3e4bf3-7a28-5d99-bca9-15d12ce77be1", "indicator--a17586b8-71df-5a54-ac41-e47565c3868b", "indicator--978e4b65-3eba-59cf-bb0f-b3f64bdb28c0", "indicator--9b110c32-d8d5-5fa3-bf54-bae22975b9da", "indicator--ec9992de-2027-5264-b787-0c30a6a4606b", "indicator--079980d1-b886-5bbe-b7ec-0b87e471c530", "indicator--a731f92f-ce74-5fb1-8c2e-2ea3adb5bb01", "indicator--da28bbe4-7353-5a0d-8c9e-5fb55b6c8158", "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "malware--746b9882-c07c-51b2-8212-17f6322f6694", "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "tool--c56f982b-3d7f-5540-91f5-8575d8315c67", "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "attack-pattern--5f4c4ffd-9018-59e6-abb9-ebc898c37a4c", "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "relationship--37767611-9657-52fd-9710-f294d9519105", "relationship--5a57c621-5ae0-5b67-a064-bffa2b1bec46", "relationship--4b22effb-4c4f-5cea-800c-f831157cdbd2", "relationship--7741fd1e-a792-5abe-96db-e7d559e5dd2a", "relationship--84c96b28-1236-5ee0-ac30-d9071e34726e", "relationship--63383891-7205-5643-8de7-7b0993ed73c9", "relationship--2b62bd76-f6ca-523a-9530-9a1cbd1b65ef", "relationship--6aa13b19-91bb-50a8-9cff-45d0d374cdac", "relationship--1bcfaa67-f2f3-5802-bcd9-6e01d9ac6761", "relationship--a2835f80-e51d-52c3-91f2-881ee87fb013", "relationship--d0ed7302-1abc-550b-92ef-ba3ab3e920b3", "relationship--0e480960-0d15-5dfd-9b1b-e57f96a8f143", "relationship--1f4cd318-2002-539b-bba6-8e1c7ec1a7dd", "relationship--57936b85-ecd8-5676-ab76-87b3a5a3b26d", "relationship--0f190de7-c600-5c97-8b82-60f0306a2157", "relationship--10ec03cb-65dc-5eb5-bcc5-05e0dea67311", "relationship--65206da1-9dd2-5e74-9df9-025ffc9b6c18", "relationship--915b57b2-3412-5ae8-9688-cb08159ea0ff", "relationship--4ff16bf4-de82-5b85-b487-7b6b95229ca4", "relationship--6753d8e2-fead-5b1d-a71c-91bbda662a08", "relationship--b788f9b4-c609-5466-86c6-5c8394e68b9e", "relationship--a5f3291c-bbe3-52d2-9e73-e9ebc9ee200c", "relationship--bfc4ca44-e388-52b7-8333-aa1f70927f64", "relationship--431de855-83f8-511f-ab08-84366c3d8533", "relationship--01ec391b-fce7-5114-84ea-228c0ba006dc", "relationship--54413e49-0e20-5dec-a62d-c5ac81c9b837", "relationship--00b14282-435d-5965-b5d1-64c1b875c575", "relationship--019f5ebd-27ff-5e22-a911-ef63f3d0ada3", "relationship--0ca7ace3-dc3f-584e-9ca9-e0ba31203a7e", "relationship--f1ea8da3-3bbe-57d7-b283-4a4a1d93e3ee", "relationship--a5ad0c3c-2c41-5e9f-aa67-cf1ac83556cc", "relationship--c6c7f437-dba2-5670-b8c8-e7285c32bb38", "relationship--fa984fee-fec4-58ed-a579-1b587ae0d00b", "relationship--fa86165d-1794-5d6b-872f-e418477e94a5", "relationship--85b76cfd-11fb-57af-ad3d-1891f2ec6055", "relationship--c701703a-90f7-5c2a-8045-7fe717c3ca4d", "relationship--da7e6adf-55f4-5ce1-bc63-3b2f89e12b9c", "relationship--6e2a9f37-e70e-5d82-9495-0b1065a42fb1", "relationship--ffe7a43b-329a-5856-a273-1cb711a41a2d", "relationship--f75a10e9-f131-5166-93d0-df8f4eea32de", "relationship--0cf4129a-6480-5d98-9020-e69c90ef474a", "relationship--339e65a2-c67d-5805-afeb-0e1a34b9a2ae", "relationship--4d489fb4-d03d-5062-81d9-205452dfe5ac", "relationship--7aa59ce0-bb3f-5b7d-b154-da70cebcbbf5", "relationship--fa10e56d-ce8c-5872-849d-ca6537be1f6f", "relationship--5a2074af-1fa8-581e-96a0-09793b7e3702", "relationship--ae25ea10-1637-55b6-8eab-51333e55d5ce", "relationship--62e5eb37-5dad-53d5-b113-c46981730652", "relationship--5f2f19b6-07d4-5ae3-821e-147e294850c9", "relationship--7d71a094-2740-5abd-8530-8de2d6679224", "relationship--136345fe-f9e0-54dd-8016-8cbf45ca96c4", "relationship--bb14188d-aaa8-5e3a-b45c-4b38fd6d737a", "relationship--19fabbf6-e90d-5429-b748-a0010d043f2b", "relationship--d990f9ed-9717-5eeb-bba3-54376a9b0f02", "relationship--c2d5326f-b29d-5e94-9296-fee4c4a1eb71", "relationship--459e17ac-289e-5c75-9d98-ffa23acdf84f", "relationship--3f3717d3-3c54-5bcc-8ac7-1a25a4e9098a", "relationship--5f667921-43e3-5fd7-ab41-dba29b58de25", "relationship--d8e3d811-5df6-54f6-8967-a0102e0359b4", "relationship--d396f995-b1ec-545e-a116-d209bead7c30", "relationship--53a362e4-e625-53e7-bc90-912cbbe58d45", "relationship--92aca467-d23a-5d23-bc4c-19bde523f1b8", "relationship--d918f974-fdec-5de0-a2b5-8754be125cda", "relationship--0101280e-d413-550d-b73d-1b49b8a6be8d", "relationship--c09cf03f-7577-5ba5-ad39-a122b32e74c0", "relationship--9d19763e-e274-5fd1-9ec2-cd112b87dc26", "relationship--63edcfdb-1ec3-5016-887d-6e99c7e7a4a9", "relationship--7a70f6cd-3665-5399-8fc6-cea0ac06bbfa", "relationship--0299d816-db5f-53ff-b1b0-7731527e45d9", "relationship--4d44ed1b-d183-5909-95df-b243dcd63aed", "relationship--4c1fe9e2-9858-5b6a-805d-b4b92f866c03", "relationship--529949b0-a0da-571c-af16-3d73bbe177c1", "relationship--c2127a3c-ff61-5871-a77d-bbdce2572032", "relationship--f5283fdb-86c1-5b42-997f-21bd2e04ec16", "relationship--c6e92812-48d8-50e9-97f1-039296ea7674", "relationship--aa04269b-6fb1-5110-83f1-e88ff2ad4a28", "relationship--45bc8406-c1ec-5a17-8255-e7f3c28069e9", "relationship--e6706ac8-efb8-552c-8dc2-4f4620e646c2", "relationship--ed0c2b3f-e429-5dd5-be16-861bdd79446d", "relationship--afd7b728-6702-58c1-8cc7-3b12d4d299c0", "relationship--36dfca65-6069-591b-87ef-ada639ef693a", "relationship--d3d12449-dbd1-5000-916a-70497eb3692a", "relationship--7e072a51-db3a-5c1c-9239-5ed7e000459c", "relationship--f0d1853d-fbb2-59be-9b2b-5f513d17d4e0", "relationship--97dc3e58-2f5a-5559-9cea-52859523cafa", "relationship--e6595f79-f8fa-5a3c-a9c6-002d9345cdd3", "relationship--efb67884-6e42-577a-af5b-28556530e2fe", "relationship--10c21099-bb92-516f-9080-1e592450e42e", "relationship--ed9da21b-30ed-540f-8662-89657e2ed624", "relationship--736787e3-4933-551f-bc78-3ce3244c63e0", "relationship--8ab6a923-d674-5b7e-8429-cb1b81c7e361", "relationship--d789d28f-6faa-53b3-b86a-2ced915338d3", "relationship--c9a91137-b73e-5e89-bce0-6e9fc79233a7", "relationship--0a4f72c2-2c8e-570a-8f4b-a472c9879757", "relationship--1766f277-a8f2-5030-8c87-fdcf28a9dd73", "relationship--31d0a778-8634-5af4-b7e9-ef285e7f59dc", "relationship--3746e35d-3364-5ec4-af1b-2561708b2387", "relationship--acf47b5b-c8de-5b3c-bac0-0fb9952e2a50", "relationship--de1b37b0-308f-56d0-964d-9b6f6a83f240", "relationship--0f00b828-0a0c-5a17-bddb-ec9f16d1d78d", "relationship--1e47d003-1772-558b-b0a8-1fadcdd32cf3", "relationship--64a25e6e-413c-5315-9cf1-72f1745537b6", "relationship--6880da3b-0a57-5ab3-9337-ca1da13b2c61", "relationship--48106c67-01d2-5b9c-a508-ebeb1a590a9e", "relationship--945341e6-cb7f-5e01-b0be-a58cc4194a20", "relationship--a5568200-511e-59df-bbc9-e013b63b7d2b", "relationship--21ec29cc-5dd3-5274-9118-9a992135cdd5", "relationship--d2e30075-5e3f-5bfa-85d6-80c10102886b", "relationship--53c0cc5c-fa43-557e-af57-500f4a3852b5", "relationship--488c3369-dcd5-5c0d-9d93-fe4e71b632f2", "relationship--1354826e-1e88-5a6c-bef2-4cff55fe85ad", "relationship--1ce8b365-c7ed-5d42-bc8a-8d9eab1deaec", "relationship--d2731416-b563-5970-af3d-9638c78a90cf", "relationship--5b2bc95b-1bbb-5846-a917-5913bd166b0d", "relationship--bc768be6-5d8a-5157-8394-713ef6561de4", "relationship--0e92d14e-7c4e-5d1a-985e-75963d832e13", "relationship--09e75b47-4ff9-5d1d-a3ec-299f2acc545b", "relationship--28da6d8e-87f7-530f-9ee9-5c114234f63c", "relationship--e4accc18-61dd-52a0-b24f-5af39d473ed2", "relationship--afab779f-05d3-5cec-b0b3-655e5ec38ced", "relationship--9b632b1c-03ea-57d8-b824-29b65b0b2f33", "relationship--69a483b5-27e1-54f4-a91c-c34ba1b7bdda", "relationship--b3fd0de2-8049-5395-9b7f-65a86619a58e", "relationship--aabaf056-e44a-5f4f-88cf-fa1e9a74876e", "relationship--5fb1ed07-2feb-572f-9608-0f5f31d1172c", "relationship--b3e4e6a6-3213-543e-8b33-9a2f8ebf53ec", "relationship--1136cfc4-2e25-5fec-a51d-b2f35eeb629d", "relationship--d6eecff0-1e89-546c-a4d5-6f38b219d848", "relationship--52ba1f13-fc15-588d-b1f3-d53d9afca145", "relationship--597ecb40-640f-5ca3-b78d-eed35209c39f", "relationship--a134205f-991b-5153-b882-c122a2393da6", "relationship--4646731b-2faa-575a-9859-d68a4ce66226", "relationship--c0e86ed9-c51b-5a85-b2d4-793fdba23841", "relationship--10ab433b-0fee-51ea-891e-b82ada3396c4", "relationship--9125ce98-7d59-5178-b344-38297313cf21", "relationship--6cbcb64e-5781-5b23-a626-57cec17df6e2", "relationship--bf2fd3f4-9fb1-5543-9c2a-acbbbb1bb8b2", "relationship--f100902f-0f06-5c65-9332-8f9cb1845af5", "relationship--b39beb79-a4c1-5b27-866f-bd746c793bb7", "relationship--995118f4-3904-5df6-ad2d-937a972e1dfb", "relationship--b528c94f-53e4-5aa1-b617-c8339783ad44", "relationship--b11628c0-2873-539e-84ac-23a499741a2e", "relationship--93fc157a-f8d3-54aa-833a-fce0277e6294", "relationship--92cd53da-652b-5d6c-9574-1eb966c8d870", "relationship--1ba7c792-6f76-5d4c-af9d-4e41659308f5", "relationship--65ca5aa3-aefc-54d2-ae68-e1d910512d13", "relationship--3290dd08-510b-5eb6-80f6-485e2e5673e8", "relationship--2db1a2f9-cc96-5228-8759-57d5b99a0995", "relationship--daedccec-40ee-51ee-bbde-7ca9394984fe", "relationship--dee84149-597f-5795-b29a-61904a67b644", "relationship--14e2bd9b-510c-54ca-9106-91b7145aa211", "relationship--6dfde421-25fd-5ae7-bf31-e447b7d9ddf8", "relationship--47def7c6-6137-5dca-a589-074f9c01634c", "relationship--b273c127-545a-50fe-a217-720d39f1d7d5", "relationship--3b624783-26ff-56f4-b716-a74619197d5e", "relationship--ab9ced35-f57c-5e1b-be70-0341cc62b48d", "relationship--cbcc1a8f-a5a7-5232-938c-4d447e41175f", "relationship--d5af89f1-338f-595e-8ff0-3f68bc71a112", "relationship--b60e550c-8a38-567a-97cb-209b709f112d", "relationship--00f51a10-ba66-5e82-84e8-d65d6888684b", "relationship--c47d00a8-2cde-5f10-8414-fcad8ebc9d9a", "relationship--5d03f823-b60c-53d8-93c4-3108641a6503", "relationship--18478ca6-7784-51e2-9896-04eae007c0a7", "relationship--de3a06d7-625a-5063-bbdc-3e6a3f8f3dd1", "relationship--3968a3c1-4df5-5ba7-b5b8-9bbc046d9aa6", "relationship--955c7496-ea7a-5958-a665-d6a0552d40b9", "relationship--fcaa704c-767c-5732-b49e-dd0e97b702a8", "relationship--f0d6ce95-46db-5bc7-bba3-c555a4e38d45", "relationship--9104a4b5-fcd6-5c2b-a98e-3d4f0b66b98f", "relationship--c6484691-5ddb-59ee-ac44-a8f72cdd9730", "relationship--3f223617-ba30-5905-8a19-b3589eee7241", "relationship--92ebe8f7-b432-5a95-8579-5f701a72de3e", "relationship--dec4254c-9f95-54f7-b607-0a74e5442d86", "relationship--e4141473-2e92-5a95-84a6-6215a816d1fb", "relationship--e5965372-a1bc-51e7-833d-200dfdbe1b1b", "relationship--593f6067-f5cc-515d-8f61-7fa7613b2a9d", "relationship--fcec838d-4997-5a7f-8c29-81d93c6e24a7", "relationship--b668a04e-14be-5119-abe8-36e4a00ce53a", "relationship--a3a185c4-2ba5-561c-b34a-95b2f83dffbd", "relationship--90182c46-29c5-5221-9dc5-2f7a75c2b524", "relationship--18dda5fc-4976-5839-8dd9-faf58eaf267c", "relationship--72f2dc56-4e75-5190-ac99-fde0746478ba", "relationship--4c564ba8-9f6e-51c8-bab2-ebc9c79b4c13", "relationship--dcc3f39b-c306-5aed-9daf-ef9337b2aee8", "relationship--2ea35854-2ba7-5133-a6c4-011288eef98c", "relationship--ea6dac8a-c584-581b-bde8-24515a2e94fe", "relationship--fb26e67e-ff1a-566f-9462-662814f7112d", "relationship--85b67d72-aa2f-524d-b3a6-d4140be62aaf", "relationship--f35d5d18-7805-5ad4-b39c-b4583b64dab5", "relationship--1e29b0c2-4b6a-5f1d-a903-5cf696ad61b9", "relationship--d35492f4-8002-5069-80b5-2bfa9cb3a200", "relationship--5d6e86c7-0a0c-51c4-bff6-4daaaabdeb1c", "relationship--60051a49-3666-595e-9e46-6c9dbd2f9e8e", "relationship--09cf84fe-41ba-5286-8088-b1a1370ec54d", "relationship--7aec2a05-0518-5eb7-b15e-8497a54d8396", "relationship--fd689333-1f23-5818-8f8a-db65767d8419", "relationship--ff65a628-433f-5484-b6e7-7218220bd2b2", "relationship--e1f12dbe-ab37-519f-a413-01a615257043", "relationship--1d2b2f0e-d413-5605-9324-7c6dadc278fd", "relationship--bcc876d5-7f15-553e-bdb3-c7a655433601", "relationship--fa8b9b74-5627-50f9-8178-2f5f75670c16", "relationship--202b82c5-416c-5052-b5f1-35b6a53ed6cf", "relationship--8f59fe91-befa-5aff-bd7b-19464a27fc01", "relationship--2f1afafd-a6f4-5304-afa4-43c9985cfd96", "relationship--b1afb0a6-5b8e-5486-b272-74a14a7d2fd8", "relationship--7d4a2870-ea80-5893-8b67-d888804d4ddd", "relationship--48201109-92ef-508b-b6c4-5a210e370752", "relationship--7bd6f2e9-ec2a-5027-9bf3-b527b241bfdb", "relationship--49f84458-fa9e-5a5e-a9b7-e35439401dce", "relationship--650dcd78-3a52-5b00-af6b-6b8cf2b40764", "relationship--aa202e8c-b74f-5c69-be8a-cb215b119690", "relationship--323de175-4217-57e1-84f3-346c8f5239a9", "relationship--3270b226-91d1-5e27-bff8-e80d7035ae2f", "relationship--fa06207e-b08e-5e57-a32d-5089484a719c", "relationship--07c23b8a-9033-509d-bf57-49238c773bb1", "relationship--5c366da2-7457-5c03-882c-6adb7ac78449", "relationship--581fc19f-c40d-5a9d-9518-28b3be589629", "relationship--1c2e5f3b-5529-583d-a5d8-100169eb91bc", "relationship--d9106b0e-4dbe-5c43-b320-f4c577dd37f0", "relationship--e3cde425-aaaf-5108-8394-3ad8cbf8b70b", "relationship--2e519985-e2c5-5bed-a8ae-d92d2ef3af0a", "relationship--dcb6c876-8ed5-55f0-9e9f-a9b18f45487a", "relationship--31b60644-aa5a-5f0f-8cf7-1e2606f65997", "relationship--973e6356-63c8-5160-ba37-d213759504e6", "relationship--c1d8b008-24c1-533f-9d45-1000eaf28d3e", "relationship--d8f3f927-7621-50d1-8d0f-0bc3c13f7d57", "relationship--6fc46d2c-229e-5444-a91e-261e096a7bbd", "relationship--4cfe29c7-15a4-5bbd-88b0-29aca5927482", "relationship--02ad8d51-0e5e-5ce4-a858-97cd998f0851", "relationship--6e3208e3-8a8a-572a-9ca5-7e74612bb930", "relationship--50cca3df-1e06-5c4d-a0e4-228ff1bfaa40", "relationship--f0aa55a4-f6fc-54e8-aa60-5c675c6db017", "relationship--74b4ebee-11cb-5e09-afd1-be9dc8cf82dd", "relationship--a3e03b4a-0174-53ef-b7cf-1a5054962a2e", "relationship--e4dcc14d-1ad5-5a9d-b561-dc87b9ef47db", "relationship--0a61db77-4876-593d-9461-344550312562", "relationship--9a010298-3842-5f8f-89ab-acb7798a849a", "relationship--5ce6a520-fbc3-5451-b5cf-83decb9026ba", "relationship--f9599bb0-69fd-55e6-8918-d911bb92ff26", "relationship--8942c9eb-cd8f-5c17-8851-87dc4eda596d", "relationship--47aad43e-f04c-53a7-af65-e2d913f0ac80", "relationship--9bd70a64-4383-50e0-8b7b-32ce0e40c5b7", "relationship--cabde7ae-69ff-5017-8429-ef58f602c0a7", "relationship--168d6276-f812-5e3b-b247-e6b6633ba558", "relationship--576faf64-87de-5009-90bd-c27917f68ca5", "relationship--df781d69-5e52-5073-bfe3-6e22a7de11ad", "relationship--c860ffac-3b5d-5f99-a3fe-fa720233a194", "relationship--936c5da7-6775-56d1-a44b-1a0eee5bb50f", "relationship--dadf5693-1de6-52ec-a793-16f259fad226", "relationship--087548dd-96b9-50a1-8927-4de4c59cefc2", "relationship--8af5c79a-77aa-58be-8e25-05d8d41ef338", "relationship--32b4522f-2c3d-590e-bdf8-61eabd9bf455", "relationship--6fe2373c-6b5d-5493-b322-a7dd9fd57e12", "relationship--949fb67f-9a55-59d6-89f6-abef96f4f4e2", "relationship--3cbddd4f-52bc-521c-838c-ca3fe189f0e9", "relationship--78e69769-8da6-557f-bb7f-613b544ab61d", "relationship--f8fd29e5-2042-5b2a-b518-25448f11f824", "relationship--79871aa2-0e50-53a5-bcc8-bc9bc8bfe56b", "relationship--90fb3596-99ad-5cee-aa84-c60dbc16536b", "relationship--a55052da-b328-5fef-a089-665beb1afc24", "relationship--e2357d84-6516-5c0f-8e45-54104fc2e376", "relationship--144e4246-b540-5135-ad3a-ff9e9d0131a3", "relationship--5322ce99-54f8-5d37-b244-1170f195514e", "relationship--ee1ebf04-c6ff-5afd-986f-bc3558c94872", "relationship--d68cdfef-4b22-547a-87d1-a38588e71989", "relationship--f2fc374b-1938-5993-b125-2d6297ff3661", "relationship--ec32b477-df4b-59b0-a6b7-986fcd45541a", "relationship--be086320-f131-5cfe-9819-ca0c82c4e1ba", "relationship--82e97b90-8357-5088-b40b-32356165c20d", "relationship--5edcf862-325a-5261-aa30-2b90f486d4d8", "relationship--604bdd59-d5ab-5fa9-b433-fffc48d634e3", "relationship--6624ce40-e819-5b5e-b416-98f067ef0166", "relationship--e0fec190-0697-502d-8f67-95d0827184d2", "relationship--572fcd23-68a2-5ffc-b640-b3d954d0d19c", "relationship--17850287-1d68-5d3d-ae72-8eb574be22fd", "relationship--294e820d-d030-5b32-92fc-490cab605fcd", "relationship--e19fd08a-8035-52ab-b7b8-5f59d23be889", "relationship--c3c712f6-6a23-5391-b37e-b81d239eed91", "relationship--2001aa1d-7cad-5191-b711-ab68f0256f81", "relationship--c222f4e6-06fa-5bb6-9f56-156f027d0c5a", "relationship--4ac2a317-60d5-54eb-98be-32c641ddc6d9", "relationship--f05a14a7-8733-5798-972c-91ce11e88982", "relationship--06820f7d-ed87-56d4-aa41-792e1b88c07b", "relationship--91e54f9f-355b-564e-89bb-78030012ba24", "relationship--73885385-c1f9-5ddf-8f71-f06c3f7f630b", "relationship--72c8e875-d574-55dd-bdb6-98d2caf8ac87", "relationship--fe8d7440-1922-5961-9e4b-5dcc37e92c4e", "relationship--b1c052d0-8367-5cff-8a67-63c92b117373", "relationship--fabfdbe7-35e5-58e5-a8e8-35586476f1fd", "relationship--3df40ce5-12ee-5d39-bfa6-7ae3c24fa88b", "relationship--975e0156-06f4-5da7-b8d6-04729d14843f", "relationship--e88ea0d3-b3b3-5d80-855b-c8cecfd3b18f", "relationship--73a873f4-9c56-5b57-9f18-f9d500906469", "relationship--bc891c8d-6499-58db-85b7-321e4f3dc0b7", "relationship--adfeb6f0-4e5c-5cdd-9554-96d245b12f62", "relationship--9c4147e8-6c94-5a51-a5ac-4a446dd2fb15", "relationship--2b63bac8-2ec2-5236-90e1-1b1326b3965a", "relationship--ac887039-ee68-588e-87a1-2c2c5304be4d", "relationship--7978eb5a-7e5b-5445-81d0-090fc72202c0", "relationship--8fc75895-29fc-547b-9a67-dda08b776c91", "relationship--649f7b18-8bf6-5791-8cd0-07a52be65143", "relationship--7dd58f0f-c23a-55a2-94a8-0003165fd516", "relationship--770693c7-d96b-5672-afe2-f392dea6b110", "relationship--fec6b6c8-ca7a-5afe-bea5-3fbee772ce90", "relationship--59c08785-a2d2-5bbd-bf6c-61063adacdf8", "relationship--c65df877-8609-5514-adb7-828baa611361", "relationship--b419d71b-11b1-56ea-b39d-b1e4a93706bb", "relationship--7be983e3-6069-588b-b990-c52b38c6ccf4", "relationship--3734dd6d-3a70-5b33-a9e6-d5848677e6fb", "relationship--de9ae70a-90df-5c63-a244-d3c30f05d629", "relationship--843fb8c9-611f-5c08-ad2b-8826e9c4cc7c", "relationship--eb005ddd-73a3-52a4-977c-a0c996f53ac9", "relationship--48f5a633-7c19-5c78-98c6-236324c61b96", "relationship--01aff6b7-04e7-5326-946c-b413f6b056e7", "relationship--da082c11-48ac-5c3f-a970-ea910c44a462", "relationship--5550526e-baec-5539-832f-a65febf5c561", "relationship--c350a7f4-dc72-5e19-b201-e359429072ca", "relationship--f6d66912-59bf-5377-8559-e32f21e9315b", "relationship--34e23f1a-6ffe-5870-b1ff-a855f64f7659", "relationship--fef67009-b694-53c4-b2d3-edf499be4695", "relationship--371ab67d-4373-596c-a238-2b0a5ddcb816", "relationship--cbec2581-3c7d-5dbb-b739-e37c07d91d15", "relationship--e3f914a2-38cb-5e3c-8329-abe447ed6000", "relationship--5cc83176-62a6-5753-87e5-64ee723f8634", "relationship--5e9eff53-54d6-5617-9a4d-30a3f3e06847", "relationship--b61913cb-eb98-5329-8aa9-204845137021", "relationship--d50cf1e5-66a3-5bb1-a635-3c299f563759", "relationship--08acc5f6-cfa8-5419-b002-83bb71d18724", "relationship--37913099-19fe-5cfa-86f4-780aae05cc91", "relationship--68532b26-708f-5218-b357-6a7eb83b3d51", "relationship--88844c4e-92c0-54a2-94d0-0358f33f7219", "relationship--50d9e6ed-2f3b-5032-8287-9b8e6c9b724f", "relationship--ca5d276e-45a0-591f-b29c-5b35018fb052", "relationship--7525f0e8-d2d7-5077-8e82-ccbd4679306e", "relationship--235aa10b-b4f2-530b-9d8e-7fadcd01117a", "relationship--47797fa9-5747-5a5a-b01f-069dff4f0cbc", "relationship--18b29b03-7a47-590a-abfd-1a38051e600e", "relationship--3218452a-cdeb-5c32-ae0d-65e2e65ed58c", "relationship--d8134b82-b6fb-54cf-a3da-cf2e633304f1", "relationship--b490b48f-7365-53db-bdb5-4b01d8f2096d", "relationship--a43cabe3-2330-5b33-9c0b-38eb215c311b", "relationship--4405a682-5f14-51b3-8bbc-14946635a8c7", "relationship--74bbc50c-add8-5799-a4e6-d9e87180443c", "relationship--e29bd32d-1aaa-57ee-8388-8e0928bd3686", "relationship--1df1d3fb-895f-5056-ae84-8b55ab6fc3e0", "relationship--a75c87da-80a6-584b-933e-a9ded6996809", "relationship--cde45747-693b-5fb0-8234-fba16547e060", "relationship--cfc73050-fb2c-54e6-8936-ab77f3ce3324", "relationship--dc29fc55-28e9-51a7-8dc1-2c2533603fe3", "relationship--a1bdd06e-6a20-5160-ac76-63c3763c6b55", "relationship--abb3c860-2381-5b91-9079-f97172136272", "relationship--67591528-19ab-5da8-92be-4c7ce33bb0cb", "relationship--db1a1c4f-f515-57e2-8fae-0900f3d07c75", "relationship--5c29bd94-46c6-5a89-a446-70557fd2a40a", "relationship--4134ea07-c6f3-5260-b64a-71d083a911c9", "relationship--87b08ea8-408a-5c95-a774-994bb4a27e9d", "relationship--642170ea-2f6d-51df-af39-f3b3def35f89", "relationship--a521e1b3-ad81-51ba-b0db-24dd8e2f94e3", "relationship--af5a846e-8a3d-5371-b453-f897adfb2aa9", "relationship--7db30453-ee72-556b-8579-f45c372f2b9d", "relationship--4636dda9-bf6c-55bb-9043-0c9c62701b75", "relationship--c9b034bc-0ead-5fa4-96c5-1b3b95c113d2", "relationship--9c59d203-c0ed-516d-8c84-272420516b3e", "relationship--6a7320cb-e77a-5f5c-b542-63c69a64e466", "relationship--7e09f29c-a7bf-5196-a18e-9c0f5ec1882d", "relationship--e2a94cca-0ce3-5258-a25d-f13d412c749b", "relationship--9ed03c73-9aa9-5fe0-bc40-72c35d74f228", "relationship--18f2b0e7-f86c-5a7a-904d-827db4067737", "relationship--670a8e4c-83ce-5bf8-ad0c-f99efe30e9cb", "relationship--e6b59488-760f-5d5a-8e0e-3ca12cfafb13", "relationship--cd7eaf1e-e4eb-5052-b349-dc9117634907", "relationship--dbee45bb-b4f1-529a-b6ac-86580b3158c8", "relationship--b7614a1f-a5e3-57ae-b8b8-acbac9c9f0ba", "relationship--45abdb1c-90bb-5b2c-bfe7-8ae1c98d9b81", "relationship--56e4c670-8400-5c9d-8605-eb7b9391fefd", "relationship--9d7368d0-1241-5df4-8627-44a25487f17d", "relationship--2fc9cbca-f809-5fb4-92ea-13d413affd07", "relationship--d2ba83d4-14a7-52a4-89e5-a2e015d6e8b1", "relationship--e423a4ad-82fe-5295-9d43-920657558906", "relationship--2720091e-6be2-578d-828d-88d047e82c53", "relationship--803b06cd-c33a-5675-af2f-78e4374184b1", "relationship--be3585d0-5571-53c6-a727-8eed56a7a4ee", "relationship--6a7deb06-6aec-5133-832b-85a997fc348e", "relationship--055312b8-f3b8-5a70-bacc-c2eb44a01d17", "relationship--dce86aa6-d515-525b-a4b6-81a3779fed91", "relationship--f5ece1f5-c01b-5b53-a4b9-ded0fc9fefc1", "relationship--79f308e1-b3b7-564c-9f06-f702a71e31c3", "relationship--ce79380d-2707-59d2-85c2-9f0784e24707", "relationship--5c562f80-9dfa-5896-8d05-a7901054fcb8", "relationship--b71e97cd-d30a-54bb-9a9e-9c954dbbec7e", "relationship--33b37618-8b0f-5047-9b1e-dfac233c9710", "relationship--49f223db-17bd-5aff-a4d3-b9601d838b02", "relationship--d4afda88-c4be-58c1-a242-1b29c3653dad", "relationship--409823c7-491a-5425-85f4-b8e66fa1d55f", "relationship--fec093f9-0ac4-59d9-87aa-7a6b40e55097", "relationship--c3394828-95a0-54e1-852a-1bb6c82302c9", "relationship--3c943f75-1d82-5cd0-b33e-83d9c05c9bf8", "relationship--67189551-ad1f-5581-b2b4-3ac9439935c6", "relationship--f9a23ada-64ea-5246-9a68-6750fcc27b83", "relationship--2e61a975-194f-5bbe-bda2-85daf2ca8e49", "relationship--9b448aae-3466-57c2-9571-684e6b82f99c", "relationship--ece6e7ee-755c-52f3-b95d-4f67b8a5324c", "relationship--c3c93c04-38c4-5fce-9dc8-61c9e3ff9f12", "relationship--607bf7f7-fca7-5068-ae80-f002051b2086", "relationship--9acb1af7-b254-55ed-87ce-4499329bf7e8", "relationship--a9247325-67a4-50dc-a947-096d068b30bd", "relationship--ae1ed1db-9987-558a-9162-b1419bf67ee3", "relationship--eecbfbde-5406-569b-a920-9b098848364b", "relationship--c2ca729d-f9be-5490-ae33-54a80063a7d7", "relationship--238031b6-65cd-545e-a130-aa9e53c77360", "relationship--e2c994d7-f80d-5362-91e3-185893722f7d", "relationship--85654ad8-cccd-524e-9547-388c42700288", "relationship--8c325885-2608-5163-be96-fab4f51412cd", "relationship--e2fcf0bb-0ada-50ab-a98e-cf1addec29f3", "relationship--9ca18ba3-17c7-515b-a56a-7f59f22cd43f", "relationship--fdbf560b-fcc0-538c-957e-f451f2f5241e", "relationship--9b956075-ecbd-52d8-9770-ac2ce63fa314", "relationship--a1345c0e-ab00-5d70-8f9d-f757348f326d", "relationship--f972b29e-ca45-5567-a41c-3d64327d93ac", "relationship--918c1482-155c-5cb0-bf3f-bceb58da06fa", "relationship--6b316427-db0d-57b2-ac33-a09308a03d9a", "relationship--ae63f6e3-c74f-5c3c-b410-4933dfe87bcf", "relationship--282d67c4-688d-56e0-808d-0f320cd4be3b", "relationship--7fd9e7a0-24d2-548a-82ff-d70d7bf9fc11", "relationship--8eebb1a8-f68b-5d7c-acab-0dfa667eef7c", "relationship--4120c398-c0ce-53e5-9432-adf4073523a3", "relationship--48140511-ce2d-545b-aaec-2f6bd4603d77", "relationship--2bd1f726-7175-56c8-ba13-8a3ac4e6167e", "relationship--829ebd2c-acb3-5b71-aeb9-3f3e5fae5d7a", "relationship--edc10bbe-5860-5c13-9dc1-befd2fef6785", "relationship--b8a33139-bb55-5af1-8f46-6435e136ce6b", "relationship--8af0377a-0bb2-5483-8ac8-8656c4588430", "relationship--752a9126-22c6-5415-98ad-fd8e6f1b19b4", "relationship--03f831f8-f551-59a0-a797-d2dd4bc6be0d", "relationship--90f0606e-c6f6-5358-a304-21c8d46c78f3", "relationship--8f86b1ae-98cb-59a0-8fc3-7ac8f5816f1d", "relationship--089dc294-fdb0-5e90-908a-8de0160a4a78", "relationship--e1f05079-34da-55e2-8c35-bad4ab35a899", "relationship--852e8665-a250-5ad7-878b-a56bb01dd3c0", "relationship--b044e771-2f95-534a-9473-be9acb00f77c", "relationship--d045074d-af2b-5e87-ba2e-8f93e53755b4", "relationship--9f3cd811-0124-5f33-99da-64d217d0801b", "relationship--cbcd49ea-1384-5bd4-89d2-9966ae647497", "relationship--e99932d4-2a59-5396-9dc0-36b9ebfd950a", "relationship--532c1278-e2b5-5e5d-9c62-9ca97fbea257", "relationship--2e4cc299-f5ec-59d2-8da9-c5aecc3f43e3", "relationship--3e9897a5-626e-5ccb-b06a-65435b3eee31", "relationship--826e800e-822e-50b3-b82f-1616169bed79", "relationship--8c96608f-5e56-56d4-94fb-6ee2023dd3af", "relationship--fff1541b-2476-55e4-a728-ab971db7611f", "relationship--5f9135fc-5746-5641-90c1-42cbdcc6f86e", "relationship--01dc40a3-107f-5e04-8887-4e308484df78", "relationship--60f0c03b-c14d-52c8-818b-dd2365e5afaf", "relationship--20348f87-d27b-5032-bcb8-5088723e5b85", "relationship--970d59af-c91f-53ca-992f-a5780e3e1e4f", "relationship--7c5aa696-5d01-55cc-931a-30cb4b85963f", "relationship--5412de4d-58dc-59f6-a5d2-98a016031124", "relationship--a0be9735-bc91-5a7d-8bf5-32f30d4a9ab1", "relationship--1eade736-b54c-51e0-8bf1-42be95663689", "relationship--c19a7c74-5896-57be-83b1-a688bdd56718", "relationship--5dbd7585-85d2-5810-a3aa-09d3affd4f82", "relationship--8033d822-0d64-573d-990b-665845c116c7", "relationship--62d664bc-e1c8-54d5-93d3-a7fa0b8d1cc6", "relationship--c2a3eb5a-cc9a-534a-b2f8-5cce03b3661e", "relationship--1be38997-5804-5ba8-9907-3a7fbf69e3a0", "relationship--d4d23ead-7d10-53e7-8a1c-bc36f5b5bee7", "relationship--c9942ae1-7b8c-51c8-9bcc-60718cba045b", "relationship--bb9e9a8e-4856-5411-85bd-40300db2dd62", "relationship--0fa7bf77-4cc6-5edf-b964-ecfd2e5595cd", "relationship--512cf649-58be-5823-bed4-4a04f1e468b2", "relationship--4cb3f716-94ee-5e03-a8cc-a27ebddd2623", "relationship--8e87863d-bbcf-571c-bb26-4d444f7c451f", "relationship--565ee435-a068-5d60-acf0-5f525ce3a501", "relationship--8c34b304-e532-54e5-9899-9e52de2045e6", "relationship--58251c99-a3e1-586a-a92a-649302c51e29", "relationship--a563eeb0-5a6b-559a-9412-f0e6a6fcec5b", "relationship--d72a659f-aa94-5d54-83d2-adcec959b763", "relationship--97722bfd-c663-57a8-83cb-538d69062c88", "relationship--285437f5-f672-5da1-86d5-6918cf5cb369", "relationship--841225a3-6376-550a-b216-339df99cd7d1", "relationship--c4fcaec5-d332-591a-ba9d-1b03b71d92fa", "relationship--4a54cb94-9cd5-5040-abdc-6285686deb5c", "relationship--24066619-f7de-5502-b4bc-644bff80d61e", "relationship--922eec99-be97-5b94-9382-e608c761254b", "relationship--359b5614-c088-57ae-aef7-47eccf97b34c", "relationship--576d7247-6dd4-5794-a230-72f0f1660b25", "relationship--ddf7a79f-a9d0-50a0-b562-2b9e16a28be6", "relationship--ec568770-bdb5-5744-a904-821b55a6e240", "relationship--f6902c20-3cf4-5be9-82ae-3851121bdc6c", "relationship--75dc0f18-96dc-5900-bf39-36e94298a66c", "relationship--e691f130-ce44-5e4a-af58-8d9854c40f73", "relationship--817090c1-95b6-59fd-90c9-fbaa35193add", "relationship--6da619fe-6511-52c6-b480-fdef35827738", "relationship--b1bbea78-9058-571a-a962-f8f1bb7aece6", "relationship--55a39792-555c-5c65-a332-faa795290c04", "relationship--1abe4260-bd40-5cc3-9cff-aebb273db545", "relationship--bbd67fe5-5493-5891-8b79-1c0d32d947c4", "relationship--ca24b97d-d5b7-5ae9-86e2-45d11b9227fa", "relationship--b2b0898f-0157-58e5-8bc4-ae8f54f1cfa2", "relationship--49b083c8-3e0a-52d9-b5c0-de910e630f36", "relationship--5bbb5b7f-0e96-5217-8b12-b8b081ec819e", "relationship--7e128330-56ab-51b0-a2b7-618bcae329be", "relationship--2233e2a2-3b64-5118-aa50-dd6cf85256fb", "relationship--cee27a48-9ca4-5dba-905f-b849b21f1099", "relationship--a96c8687-7efa-5414-be14-8f27c7c8b25d", "relationship--946fd93d-5c3d-51b5-8a1a-ed0b945ff58c", "relationship--d20a7d94-9e94-58cd-92e2-a88969bf8d81", "relationship--bec86933-f0bc-5325-8c72-6e806029ae0a", "relationship--13fd6f93-e992-5fc5-ba73-d946ebf2b23e", "relationship--4974ce2f-dae9-5dfe-9c58-892fb69e8ad2", "relationship--c91b2ead-43a1-5fd0-bfd0-94b16c135c8f", "relationship--48287bbd-87c9-5e79-a967-307c5ef175e0", "relationship--9b7526af-10ce-5052-9810-498cca1ef4d3", "relationship--2cf185e8-0f1d-5e3b-980d-9e13f9cd7771", "relationship--594d0a54-ba24-5496-af28-056d6407f854", "relationship--e0057b74-3276-5522-be3a-2f41d513782c", "relationship--864bc1e5-3f01-5ad6-86c4-6d21b7d294bc", "relationship--0791fc95-56e4-5445-a889-849e2863d537", "relationship--869b8cd8-d486-5840-9116-6b216d9b2703", "relationship--64576abf-e657-5464-a32c-fcb498cb3953", "relationship--1d0298ae-4a66-5598-9b54-14bdbc98bcb6", "relationship--15d1ddee-af46-5925-bc46-2b83c6117737", "relationship--3f4f8367-d3a1-5298-81a5-d7f068e998cb", "relationship--6af3bb0f-cf4b-5457-af32-a6364f94ad49", "relationship--d6a00084-22b4-55fd-aadc-ad31ea301bf6", "relationship--b0c5e85c-3b5c-5586-8135-7e371ef3973f", "relationship--13668a24-d044-5d86-a055-1d2574f3c592", "relationship--23ac6f91-8b73-57f7-8586-073b0ec34f0e", "relationship--9f9af60f-a685-56ce-abcf-59904fd56640", "relationship--2c0f5229-0407-559a-841d-50f0033083de", "relationship--84509407-3d63-5a04-96b3-805f2c53c01b", "relationship--48b9c333-db21-5a3c-886b-45995b31d57f", "relationship--cab71eee-de79-5c65-b1c9-6fca7baa54ef", "relationship--65e78946-f31e-5e5a-bd78-59ad4d6a68f1", "relationship--5a5c91c1-e3c4-56c4-80da-7aed72ea638a", "relationship--14e4f738-a592-53d0-ae7c-3ebf4d53df9d", "relationship--700ac56c-98cc-587c-8cd4-d3f13ecf190b", "relationship--2e284984-436c-59f6-bf45-52ab54671d9a", "relationship--516e85a9-2a26-5df3-8fcd-73ef2d32d0bf", "relationship--ee7215f3-7d4c-596a-a244-fe6ec50ba7f0", "relationship--0cc36883-8ee6-532e-a96b-fcc3bb5bc354", "relationship--8655f635-2b64-5c0e-85a2-ff0dc98defb8", "relationship--21027593-add7-53d9-aa9d-22577137b8f4", "relationship--6d1a9d77-91ec-58cd-b2d1-f3d43a50b45a", "relationship--0e0c23d9-a356-5eaf-8219-7db10c882870", "relationship--c296c5fa-2419-556a-87f4-cd956c4856e1", "relationship--939d8ed8-41d9-5ef1-b560-e87cd63b7c70", "relationship--e865d8fd-609e-579d-be17-563e79b28962", "relationship--283bd16c-3d95-54fa-b983-0fa41d314dd2", "relationship--2f2af185-2584-595a-9c03-da8ce07a32a9", "relationship--00180e51-1ec4-524a-9db1-3dbde615c03e", "relationship--94bb4ebc-ec35-5dd9-97d1-aa0bc7936620", "relationship--6b14ad00-5812-5f96-b64c-f2ebd537315a", "relationship--20ee74c6-2c05-5d69-af45-4d44c3f761ae", "relationship--04e8cc11-bb8b-5466-8d9b-b44eb08cc0bb", "relationship--cdc1280d-bdf4-5e20-abcb-3af4a676d992", "relationship--1bcc0c99-9961-58dc-9f4a-274deaa58c0e", "relationship--20a87817-2fae-5119-a837-b4d80e74e5c8", "relationship--0cfe00d0-7af4-5dc6-8586-4984a956a544", "relationship--4a34f757-9d57-571b-ab24-1c361343ca30", "relationship--bfcea76f-9a61-5d9f-8edd-7ee2b759c8ec", "relationship--b9f06e0f-002b-562c-baff-5f73f2468ed3", "relationship--435974a2-f08f-5c28-8a8f-e57be15f5b5b", "relationship--f8e5b146-b87b-542c-a376-3971cd70c394", "relationship--6a7a322d-f180-509c-9925-b2f7e2f54cf0", "relationship--f3176dab-1e17-5abd-92ae-3fee63730c11", "relationship--d64eb4f0-4fbd-51f3-aee0-b91e4ee0deb6", "relationship--a8d09c91-c335-5cb2-b971-221cdc53cc80", "relationship--a3389ca8-294b-5b3f-af66-4ae005015753", "relationship--4620be8d-d5ce-5c18-89bc-93e7a54a5b9c", "relationship--dc9d104e-3f66-597c-9af3-352703ac1b69", "relationship--f3dbb2fc-5f8e-5bb7-aa4d-4f6bd33e5a99", "relationship--1633fe8a-2ba2-5084-8707-8c110d02eade", "relationship--2f7a8b43-6953-5fcf-8726-1c1cd00820fc", "relationship--d2e8cf6d-ea50-5fe0-b4ef-aa0b2e6014ee", "relationship--50f37172-9da5-52d4-96dd-a6b93fd8e9f2", "relationship--61695452-7e60-5d5c-a5ed-2bcc745e762c", "relationship--260be228-0129-5f9b-a94e-c10825c6f388", "relationship--f9a6feea-1c7b-56d8-84cc-6bd6fbc96049", "relationship--1a5d4784-c8e1-5a17-96e5-acc0ea6d6c2a", "relationship--816a9a90-f0c0-5348-8952-4bc5d1f4ac5c", "relationship--a59eaada-88ce-5234-8809-058e99ad5659", "relationship--1e18a8f5-04ba-520b-8a83-d70abef14135", "relationship--79f2e911-b3fe-5a01-8bd6-99d2fc221f87", "relationship--c403f4dd-d728-5786-921e-0305f6a0d02e", "relationship--164561aa-8586-52db-9da1-20b8f87148fd", "relationship--cf429da7-9934-57d3-b3ba-25a4062f1b0b", "relationship--ca929b44-f7fa-56a7-b485-e59f0d8a82c3", "relationship--fa725def-45a2-5e23-90bf-588cf5491bd1", "relationship--b41ae52b-4cde-5ad6-80ac-e84675ebeedc", "relationship--f9736aa2-88d4-5da9-94a0-00a1ebc24439", "relationship--eb260b2e-6d15-5941-bd7b-51bd227d19cb", "relationship--a1a6056d-0326-51a8-9388-60d3032c8564", "relationship--b266df4e-50aa-530e-83d0-22c8b0740fb7", "relationship--cc9129a0-28bd-5ec6-98f2-ead89ebf345d", "relationship--c68bd546-be05-5c21-a84d-25f117fa966a", "relationship--d8abba56-2670-55a5-ae4d-e8f4cf70d170", "relationship--f57a89f3-8b3e-5788-b1df-77aa0115c37a", "relationship--17ea6306-d31a-51f4-b471-cbb761387553", "relationship--b118382f-3c9d-5dfb-b05a-9e6f585767b6", "relationship--e41f78e5-e2c6-5fe7-a7f3-6ee42305118e", "relationship--1bffc7ef-6062-589f-94d3-f5162e70a6d1", "relationship--917366c8-04eb-5966-b33c-c0f9f90220fe", "relationship--0edf86fa-6c33-563c-b44f-2855cc0c3bda", "relationship--606dfaf8-0048-5172-ad38-42825605994b", "relationship--998b61ff-bb66-52a6-8890-19db5702abc9", "relationship--38bda41f-f26f-5abd-b9d8-c275e3b03ca1", "relationship--3afedd08-6e8c-5b21-83bc-39a5726168a5", "relationship--f33f441c-80eb-550e-87cb-264d252c8701", "relationship--8f27cdb0-6629-572d-b3b1-d009854d8fcc", "relationship--554c3d7d-1467-52fa-882b-abd29e116dd2", "relationship--1287a1f8-8992-529e-b306-b9c90aa3a587" ], "labels": [ "Cryptominer", "Rootkit", "Toolkit", "Open Dir" ], "external_references": [ { "source_name": "The Hunters Ledger", "url": "https://the-hunters-ledger.com/reports/ghost-cryptojacker-vova75rus-77.110.96.200/" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] } ] }