{ "type": "bundle", "id": "bundle--cd870918-f0f8-4cf6-a463-a51d3468e3d5", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.718239Z", "modified": "2026-10-01T19:54:13.718239Z", "name": "The Hunters Ledger", "identity_class": "organization" }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } }, { "type": "ipv4-addr", "spec_version": "2.1", "id": "ipv4-addr--01667cb8-3c97-5586-8e24-d27194d922d8", "value": "77.110.125.145" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--25c06a59-d267-5c27-92e7-73c12559f225", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.718755Z", "modified": "2026-10-01T19:54:13.718755Z", "name": "ipv4: 77.110.125.145", "description": "Lower-OPSEC operator using public mining pools (auto.c3pool.org:443 + cfx-asia1.nanopool.org:10543); no Hysteria backdoor deployed; abandoned 40+ days (last on-chain activity 2026-04-12); same /16 as Operator-A", "indicator_types": [ "malicious-activity" ], "pattern": "[ipv4-addr:value = '77.110.125.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "ipv4-addr", "spec_version": "2.1", "id": "ipv4-addr--7f6daaa1-cf23-5900-8670-4f3d89e74332", "value": "77.110.96.200" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--31de5704-b9f1-5a38-af29-a1d3c16f093c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.721484Z", "modified": "2026-10-01T19:54:13.721484Z", "name": "ipv4: 77.110.96.200", "description": "Higher-OPSEC operator with self-hosted XMR pool proxy (:3333) and CFX pool proxy (:4444) - masks wallet attribution at pool layer; Hysteria v2 backdoor on UDP :14433/:14444; admin panel HTTP :3301; campaign LIVE as of 2026-05-25", "indicator_types": [ "malicious-activity" ], "pattern": "[ipv4-addr:value = '77.110.96.200']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--73087b89-df73-57b6-8b83-19d276c39d28", "value": "auto.c3pool.org" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4ba05cb5-2063-59d1-8c76-2a9f0848f359", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.721963Z", "modified": "2026-10-01T19:54:13.721963Z", "name": "domain: auto.c3pool.org", "description": "Public c3pool - Operator-B uses public pool with no proxy concealment | c3pool is a legitimate public mining pool used by many non-malicious miners; detection requires correlation with operator deployment patterns", "indicator_types": [ "anomalous-activity" ], "pattern": "[domain-name:value = 'auto.c3pool.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--5324675a-95fe-57ae-8d68-92d935706860", "value": "bing.com" }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--f59c038d-17eb-5db9-a047-536271a7f8cc", "value": "cfx-asia1.nanopool.org" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c15d88ec-6a0d-5f85-bd50-d10c77034938", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.722705Z", "modified": "2026-10-01T19:54:13.722705Z", "name": "domain: cfx-asia1.nanopool.org", "description": "Public nanopool Asia-1 region; chosen for latency NOT operator geography (operator confirmed Russian-speaking via New_scanner.py Cyrillic content) | nanopool is a legitimate public mining pool; same FP rationale as c3pool", "indicator_types": [ "anomalous-activity" ], "pattern": "[domain-name:value = 'cfx-asia1.nanopool.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--efa8dec6-16fc-5a4c-b899-a9661108b910", "value": "cfx.kryptex.network" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ed1a4e8c-f8a4-5f4b-9385-23fe8ac3cf03", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.723179Z", "modified": "2026-10-01T19:54:13.723179Z", "name": "domain: cfx.kryptex.network", "description": "Same Kryptex service - Conflux variant", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'cfx.kryptex.network']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--de3fa8dc-f23c-50c3-b544-0490ba3b86d4", "value": "etc.kryptex.network" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f45acd05-fede-5fa5-94ac-1cd78a421f2f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.723581Z", "modified": "2026-10-01T19:54:13.723581Z", "name": "domain: etc.kryptex.network", "description": "Same Kryptex service", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'etc.kryptex.network']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--4e57536f-d092-56e5-8063-c68b54fc8340", "value": "get.hy2.sh" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e1ed5be4-63e1-5abe-bc83-1c52bc8772dc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.724153Z", "modified": "2026-10-01T19:54:13.724153Z", "name": "domain: get.hy2.sh", "description": "Used by hyst.sh to download Hysteria binary; Hysteria itself is dual-use software (censorship circumvention + backdoor); detection requires operator deployment correlation | Hysteria is dual-use; correlate with operator listening on :14433/:14444 + admin panel on :3301 before blocking", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'get.hy2.sh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 60, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 60 }, { "type": "url", "spec_version": "2.1", "id": "url--5ce4450b-b005-5587-85a6-c9a7574f14d4", "value": "http://77.110.125.145/ghost.sh" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e2ad61c2-820a-5176-9fe0-7dfe67f6b6e8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.724546Z", "modified": "2026-10-01T19:54:13.724546Z", "name": "url: http://77.110.125.145/ghost.sh", "description": "Operator-B self-hosted kit URL - 17-byte per-customer config delta vs Operator-A's copy", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.125.145/ghost.sh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--2a3bd9ca-4e0b-5468-a083-31229ebc07d5", "value": "http://77.110.125.145/libpam_cache.so" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f53751be-9c3c-5867-82e8-1940fb262b2e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.725045Z", "modified": "2026-10-01T19:54:13.725045Z", "name": "url: http://77.110.125.145/libpam_cache.so", "description": "Operator-B self-hosted payload URL - same binary as Operator-A's", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.125.145/libpam_cache.so']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--38223062-c1b6-5c69-938f-92b01becee18", "value": "http://77.110.96.200/ghost.sh" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b821c58f-d17a-584d-ab7c-9660f78c3c73", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.725444Z", "modified": "2026-10-01T19:54:13.725444Z", "name": "url: http://77.110.96.200/ghost.sh", "description": "Operator-A self-hosted kit orchestrator URL", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/ghost.sh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--37c09452-19ee-53ee-b8bc-dc1145aa5e9c", "value": "http://77.110.96.200/hyst.sh" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--535731ea-77f8-59b0-b15c-63019ff12479", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.725759Z", "modified": "2026-10-01T19:54:13.725759Z", "name": "url: http://77.110.96.200/hyst.sh", "description": "Operator-A self-hosted Hysteria wrapper URL", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/hyst.sh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--fb08fc1b-bf12-5815-9f7c-acacad2e6b6d", "value": "http://77.110.96.200/libpam_cache.c" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5f5b0e7e-a2e8-55be-b77c-86662db1b49e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.726084Z", "modified": "2026-10-01T19:54:13.726084Z", "name": "url: http://77.110.96.200/libpam_cache.c", "description": "Operator-A self-hosted source URL for rootkit C source", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/libpam_cache.c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--710664e2-c100-579c-92b0-7d120ff87ba7", "value": "http://77.110.96.200/libpam_cache.so" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--da981557-2e76-5cd5-8b5d-2bd5321fa1cc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.726419Z", "modified": "2026-10-01T19:54:13.726419Z", "name": "url: http://77.110.96.200/libpam_cache.so", "description": "Operator-A self-hosted payload URL for rootkit binary", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/libpam_cache.so']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--b1907458-d5db-593f-bdde-3c899a809ed5", "value": "http://77.110.96.200/lmm.gz" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2942f30a-88a9-5385-8e95-065c37786c43", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.726735Z", "modified": "2026-10-01T19:54:13.726735Z", "name": "url: http://77.110.96.200/lmm.gz", "description": "Operator-A self-hosted miner binary archive", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/lmm.gz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--b131345f-7f2f-5629-84a3-138177737c64", "value": "http://77.110.96.200/min1.sh" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0a40092b-291d-5d74-9d5c-c9b9e23e083e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.727081Z", "modified": "2026-10-01T19:54:13.727081Z", "name": "url: http://77.110.96.200/min1.sh", "description": "Operator-A self-hosted miner wrapper URL with DUAL-TELEGRAM", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/min1.sh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--641cf062-6586-5e27-adee-ae9e5b174696", "value": "http://77.110.96.200/xmr.gz" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3924a79f-39ad-51dd-b8e2-43ac4f8ee54c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.727409Z", "modified": "2026-10-01T19:54:13.727409Z", "name": "url: http://77.110.96.200/xmr.gz", "description": "Operator-A self-hosted miner binary archive", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200/xmr.gz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--9e8596d0-361b-599c-9bbc-458c3773557e", "value": "http://77.110.96.200:3301/api/login" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--63081f19-a1d6-5053-a4b2-c426db9e40fb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.727725Z", "modified": "2026-10-01T19:54:13.727725Z", "name": "url: http://77.110.96.200:3301/api/login", "description": "Operator-A Hysteria admin panel API", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200:3301/api/login']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "url", "spec_version": "2.1", "id": "url--f385c410-27a7-53ae-b673-1b92031d9d9a", "value": "http://77.110.96.200:3301/api/stats" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a75c5beb-93b4-504f-b0cb-ba40949b8932", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.728041Z", "modified": "2026-10-01T19:54:13.728041Z", "name": "url: http://77.110.96.200:3301/api/stats", "description": "Operator-A Hysteria admin panel API", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200:3301/api/stats']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "url", "spec_version": "2.1", "id": "url--4acee241-266a-50cc-9d29-0e06d15a1c33", "value": "http://77.110.96.200:3301/api/vpn_report" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e24d7444-2d05-5cd9-b339-d3c1e963dcef", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.728373Z", "modified": "2026-10-01T19:54:13.728373Z", "name": "url: http://77.110.96.200:3301/api/vpn_report", "description": "Operator-A Hysteria admin panel API", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://77.110.96.200:3301/api/vpn_report']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "url", "spec_version": "2.1", "id": "url--aae4b515-0ce3-5820-84f2-f4e1c6bef4e4", "value": "https://github.com/Vova75Rus/ComfyUI-Shell-Executor" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--945c4ea1-5c16-55c9-a98c-dee7d2dfb993", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.728721Z", "modified": "2026-10-01T19:54:13.728721Z", "name": "url: https://github.com/Vova75Rus/ComfyUI-Shell-Executor", "description": "DELETED post-Censys disclosure (April 2026); Vova75Rus account suspended by GitHub T&S 2026-05-25", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://github.com/Vova75Rus/ComfyUI-Shell-Executor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--ab9e7e34-9ca1-50c7-8617-b08ee5919040", "value": "https://github.com/Vova75Rus/Dim" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--861ba2a9-51e3-5eaa-b24c-6466bdc41ba9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.729182Z", "modified": "2026-10-01T19:54:13.729182Z", "name": "url: https://github.com/Vova75Rus/Dim", "description": "UnamWebPanel-derived PHP admin panel (/* Made by Unam Sanctam */ attribution) + pliny_miner.py + 123.py; admin password hardcoded 'miner'; suspended by GitHub T&S 2026-05-25", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://github.com/Vova75Rus/Dim']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--38324a9f-4ac7-5c84-95ec-361a4498a520", "value": "https://github.com/Vova75Rus/Notes.github.io" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--44cedbec-2e5d-5a2b-9083-7412f44334e6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.729538Z", "modified": "2026-10-01T19:54:13.729538Z", "name": "url: https://github.com/Vova75Rus/Notes.github.io", "description": "Opens with 'Для Арины 💖 С 8 Марта' (For Arina 💖 March 8th); personal-attribution leak; suspended by GitHub T&S 2026-05-25", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://github.com/Vova75Rus/Notes.github.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "url", "spec_version": "2.1", "id": "url--4170286d-e8df-54f7-b26b-2f3fd4c5313d", "value": "https://github.com/Vova75Rus/legendary-carnival" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fd9b3cb2-de6e-5d1c-aec2-f8bd892dda95", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.72989Z", "modified": "2026-10-01T19:54:13.72989Z", "name": "url: https://github.com/Vova75Rus/legendary-carnival", "description": "GHOST kit staging directory - xmrigggggsteal, lmmiineeer disguised binaries + 5 Russian-language scripts; suspended by GitHub T&S 2026-05-25", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://github.com/Vova75Rus/legendary-carnival']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--7b8c1702-71ea-5555-a9f7-5eee08bbf2c5", "value": "https://github.com/Vova75Rus/miner" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5e0a3104-cc85-5091-9437-f5795d2171b1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.730235Z", "modified": "2026-10-01T19:54:13.730235Z", "name": "url: https://github.com/Vova75Rus/miner", "description": "Contained config.json + kill_list.patterns + disguised xmrig (13MB git-SHA 9482a637...) + disguised lolMiner (8MB git-SHA 19ced92c...); suspended by GitHub T&S 2026-05-25", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://github.com/Vova75Rus/miner']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "url", "spec_version": "2.1", "id": "url--b15e151a-3c62-58d4-9ec8-4a8588c577bc", "value": "https://github.com/jamestechdev-oss/ComfyUI-Shell-Plugin" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3465630b-25cc-50fa-a9a4-bb1e2b64aa0a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.730561Z", "modified": "2026-10-01T19:54:13.730561Z", "name": "url: https://github.com/jamestechdev-oss/ComfyUI-Shell-Plugin", "description": "DELETED post-Censys; entire jamestechdev-oss account scrubbed - cannot verify identity vs Operator-B", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'https://github.com/jamestechdev-oss/ComfyUI-Shell-Plugin']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--e7840786-a916-5c8a-8589-f22ec7832462", "value": "xmr.kryptex.network" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3b717480-1786-5beb-ab11-5c180da3de1d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.730947Z", "modified": "2026-10-01T19:54:13.730947Z", "name": "domain: xmr.kryptex.network", "description": "Kryptex pool (Russian mining service)", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value = 'xmr.kryptex.network']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "file", "spec_version": "2.1", "id": "file--52c73e5e-98c8-5ea5-beb4-bfbde3847c21", "hashes": { "SHA-256": "008bc5ab73e75bb76131f91d68a3792d9e4393137c14afe8c44d44be2a2c46f6" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f1cd66d6-553a-5791-a654-204dd2e3a85b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.731623Z", "modified": "2026-10-01T19:54:13.731623Z", "name": "sha256: 008bc5ab73e75bb76131f91d68a3792d9e4393137c14afe8c44d44be2a2c46f6", "description": "Operator-A miner-only installer with DUAL-TELEGRAM (OWNER bot 8415540095 kit-author baked + MIRROR bot 8315596543 operator-set); 0/53 VT (UNDETECTED); Last Modified 2026-05-24T17:10:29Z (operator actively iterating)", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = '008bc5ab73e75bb76131f91d68a3792d9e4393137c14afe8c44d44be2a2c46f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--1a81de11-5521-5e95-be17-94ff0c5329eb", "hashes": { "SHA-256": "6e5d897c7fd0060c7da2394ad1bb3584827c216f8aadac4f6ed41b2d915f0070" } }, { "type": "file", "spec_version": "2.1", "id": "file--83333950-4b98-5d26-9a67-44f8e641e1e1", "hashes": { "SHA-256": "822afb1fb29f22df8c951726d492021df2940223ed719881dafb40cda3894c5c" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--876ea16b-5804-5690-85ee-684bad2f221e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.732834Z", "modified": "2026-10-01T19:54:13.732834Z", "name": "sha256: 822afb1fb29f22df8c951726d492021df2940223ed719881dafb40cda3894c5c", "description": "Operator-A Hysteria v2 backdoor installer; Russian-language operator wrapper (10 Cyrillic words); admin panel callback http://77.110.96.200:3301; bing.com SNI masquerade; NOT IN VT", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = '822afb1fb29f22df8c951726d492021df2940223ed719881dafb40cda3894c5c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--d69636b5-9b6c-578f-8be2-698aaeacfca3", "hashes": { "SHA-256": "9023734a70ee6a05d4ecd5466d0c5803f293601836deb00cc417a3add04bd93e" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--616d755d-07d1-53b4-9af7-ceff7dff37e7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.733286Z", "modified": "2026-10-01T19:54:13.733286Z", "name": "sha256: 9023734a70ee6a05d4ecd5466d0c5803f293601836deb00cc417a3add04bd93e", "description": "Operator-A cloud IP-range scraper; Russian-language (4 Cyrillic words); 12 bgpview.io ASN queries + Oracle + Google official ranges; feeds ComfyUI scanner pipeline", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = '9023734a70ee6a05d4ecd5466d0c5803f293601836deb00cc417a3add04bd93e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--3f3f0d01-7638-511e-bfc0-334e1600087f", "hashes": { "SHA-256": "dc232b55329d95fe2a47a8d637b7bffea06f18e3d8332ba94b042b1862213a1d" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6e1517d0-ebed-56bf-ab6a-dbb1dc8a8021", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.73371Z", "modified": "2026-10-01T19:54:13.73371Z", "name": "sha256: dc232b55329d95fe2a47a8d637b7bffea06f18e3d8332ba94b042b1862213a1d", "description": "Operator-A ComfyUI target verification script; Russian-language (4 Cyrillic words including ИТОГО, Найдено); GETs /system_stats and /queue endpoints on port 8188", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = 'dc232b55329d95fe2a47a8d637b7bffea06f18e3d8332ba94b042b1862213a1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--e9a30230-8d34-538d-99b3-36dcb416f146", "hashes": { "SHA-256": "e943b58112f58517b95424dba9334bf97c5dc2dd2f069dca04b9e75b9fec56ba" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3dfaa4d5-4638-5546-9b78-e5e5a0f551b4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.734133Z", "modified": "2026-10-01T19:54:13.734133Z", "name": "sha256: e943b58112f58517b95424dba9334bf97c5dc2dd2f069dca04b9e75b9fec56ba", "description": "Operator-A copy (77.110.96.200) - 1338-line Bash installer GHOST v5.1; 43 functions including 4 container-escape variants; VT 13/63 with only generic signatures (Symantec PUA.Gen.2, Kaspersky HEUR:Downloader.Shell.Miner.a, Microsoft Trojan:Script/Wacatac.B!ml)", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = 'e943b58112f58517b95424dba9334bf97c5dc2dd2f069dca04b9e75b9fec56ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--49b1373f-d0d7-5e0d-b693-d306200931b4", "hashes": { "SHA-256": "eaaa10c840de23335abae1a9ead0a6a7fb7be5187cd19ad05137feab12bb7301" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--be07cd65-95b6-5ca4-8279-d70ba1dd7dad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.734532Z", "modified": "2026-10-01T19:54:13.734532Z", "name": "sha256: eaaa10c840de23335abae1a9ead0a6a7fb7be5187cd19ad05137feab12bb7301", "description": "LD_PRELOAD userland rootkit ELF64 - BYTE-IDENTICAL across both customer hosts 77.110.96.200 and 77.110.125.145; refutes per-victim compilation; GCC 13.3.0 Ubuntu 24.04 GLIBC 2.34+; 0/0 VT detections (never scanned)", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = 'eaaa10c840de23335abae1a9ead0a6a7fb7be5187cd19ad05137feab12bb7301']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "file", "spec_version": "2.1", "id": "file--abfe340a-6db0-5e91-8192-b6b28dc7a151", "hashes": { "SHA-256": "edafde0d33ff1a169c0c4eeaeec12d1759818c7cf4950fcee91c687e811e6cff" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6d1bc44e-fe7e-5313-9aae-cffcd26c0997", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.734924Z", "modified": "2026-10-01T19:54:13.734924Z", "name": "sha256: edafde0d33ff1a169c0c4eeaeec12d1759818c7cf4950fcee91c687e811e6cff", "description": "98-line C source for the rootkit - shipped alongside binary for victim-side recompile (kit-author practice); NOT IN VT", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.'SHA-256' = 'edafde0d33ff1a169c0c4eeaeec12d1759818c7cf4950fcee91c687e811e6cff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-05-25T00:00:00Z", "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 95 }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--599c408e-c4d7-5666-bb98-73a1064b0072", "value": "icanhazip.com" }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--30251869-4ef6-5d4b-9c03-9105e254850f", "value": "ifconfig.me" }, { "type": "domain-name", "spec_version": "2.1", "id": "domain-name--02144e04-ed1d-5db8-bf2c-a8a02deced9e", "value": "ip.sb" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0b2abd83-408d-5507-b85e-bbffaaa202e7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.744545Z", "modified": "2026-10-11T14:08:24.270743Z", "name": "MAL_Linux_GHOST_libpam_cache_Rootkit_Family", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_libpam_cache_Rootkit_Family {\n meta:\n description = \"Detects GHOST cryptojacker kit LD_PRELOAD rootkit libpam_cache.so — ELF64 file carrying the readdir and fopen hook exports (the 64-bit variants readdir64 and fopen64 are not tested) plus the hide-list strings used to hide miner processes, kit paths, and operator wallet prefixes from /proc listings; byte-identical across all known GHOST kit customer deployments\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n hash1 = \"eaaa10c840de23335abae1a9ead0a6a7fb7be5187cd19ad05137feab12bb7301\"\n hash2 = \"edafde0d33ff1a169c0c4eeaeec12d1759818c7cf4950fcee91c687e811e6cff\"\n hash3 = \"296a800564111b0bad9fe63faf4e63ba\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"LD_PRELOAD Rootkit\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"ca987dcd-ca0e-5e71-a3b1-cab19fd7a851\"\n strings:\n // Hook function exports — the four libc symbols this .so overrides\n $export_readdir = \"readdir\" ascii fullword\n $export_fopen = \"fopen\" ascii fullword\n // GHOST-specific hide-list strings from H[] array — operator-deployment-path artifacts\n $hide_khugepaged = \"khugepaged_\" ascii\n $hide_nv_uvm = \"nv_uvm_\" ascii\n $hide_inotify = \"inotify_guard\" ascii fullword\n $hide_libpam_self = \"libpam_cache\" ascii\n $hide_fontcpu = \"fontconfig/.cpu\" ascii\n $hide_fontgpu = \"fontconfig/.gpu\" ascii\n $hide_pid_guard = \".pid_guard\" ascii\n $hide_ghost_sh = \"ghost.sh\" ascii fullword\n // LD_PRELOAD removal constructor — unsetenv called at load time\n $unsetenv_preload = \"LD_PRELOAD\" ascii fullword\n // Port-filter format string — uppercase hex zero-padded matching /proc/net/tcp native format\n $port_fmt = \":%04X\" ascii\n // /proc hooking targets\n $proc_net_tcp = \"/proc/net/tcp\" ascii\n $proc_cmdline = \"/proc/%s/cmdline\" ascii\n $proc_exe = \"/proc/%s/exe\" ascii\n // ELF magic bytes for shared object detection (7f 45 4c 46 = ELF magic)\n $elf_magic = { 7F 45 4C 46 02 01 01 00 }\n condition:\n // ELF64 little-endian file (magic + ELFCLASS64 + ELFDATA2LSB); e_type is not tested\n $elf_magic at 0 and\n // File size: 14,568 bytes exact for known sample; allow up to 50KB for compiled variants\n filesize < 50KB and\n // Require hook exports + multiple hide-list strings + port format string + proc hooks\n ($export_readdir and $export_fopen) and\n $port_fmt and\n ($proc_net_tcp or $proc_cmdline or $proc_exe) and\n ($unsetenv_preload) and\n 3 of ($hide_*)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--346e9bdf-0129-5bc8-9ecc-27f99e556375", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.74466Z", "modified": "2026-10-11T04:24:15.787606Z", "name": "MAL_Linux_GHOST_libpam_cache_Source", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_libpam_cache_Source {\n meta:\n description = \"Detects GHOST cryptojacker kit LD_PRELOAD rootkit C source file libpam_cache.c — dense hand-written C with single-char helper declarations, an RTLD_NEXT resolver, an unsetenv LD_PRELOAD constructor, a port-format string and GHOST-specific hide-list contents (it does not test for the hooked libc function names); shipped alongside compiled .so on kit-author distribution server\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n modified = \"2026-10-11\"\n hash1 = \"edafde0d33ff1a169c0c4eeaeec12d1759818c7cf4950fcee91c687e811e6cff\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"LD_PRELOAD Rootkit Source\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"9f7d2a2c-c893-5f7f-a3c0-ab6fac644947\"\n strings:\n // GNU source define enabling RTLD_NEXT\n $gnu_source = \"#define _GNU_SOURCE\" ascii\n // RTLD_NEXT hook resolution pattern\n $rtld_next = \"RTLD_NEXT\" ascii fullword\n // Constructor pattern — unsetenv called with LD_PRELOAD at constructor time\n $constructor_attr = \"__attribute__((constructor))\" ascii\n $unsetenv_call = \"unsetenv(\\\"LD_PRELOAD\\\")\" ascii\n // Hook function identifiers (dense single-char style from this author's code)\n $helper_sh = \"static int _sh(\" ascii\n $helper_ph = \"static int _ph(\" ascii\n $helper_fn = \"static FILE *_fn(\" ascii\n // GHOST-specific hide-list entries in the H[] array\n $hide_inotify = \"inotify_guard\" ascii fullword\n $hide_khugepaged = \"khugepaged_\" ascii\n $hide_ghost = \"ghost.sh\" ascii fullword\n // Port filter format string\n $port_fmt = \":%04X\" ascii\n condition:\n // No ELF magic — this is C source text\n filesize < 10KB and\n $gnu_source and\n $rtld_next and\n $constructor_attr and\n $unsetenv_call and\n $port_fmt and\n 2 of ($helper_*) and\n 2 of ($hide_*)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cca2fb59-54ea-5f41-b885-b4da230895bd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.744749Z", "modified": "2026-10-01T19:54:13.744749Z", "name": "MAL_Linux_GHOST_Kit_Shell_Installer", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_Kit_Shell_Installer {\n meta:\n description = \"Detects GHOST cryptojacker kit primary Bash installer ghost.sh — 1338-line English-language Bash script containing GHOST v5.1/v6.0 codename banner, competitor-displacement function _anti_hisana, 4 container-escape variants, LD_PRELOAD rootkit build/install functions, and multi-vector persistence; function names unique to GHOST kit family\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n hash1 = \"e943b58112f58517b95424dba9334bf97c5dc2dd2f069dca04b9e75b9fec56ba\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"Bash Installer/Orchestrator\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"e3af0826-0aba-54ee-90ae-f49c95fb66ba\"\n strings:\n // GHOST kit version banners (in first-line comment of ghost.sh)\n $banner_v51 = \"GHOST v5.1\" ascii\n $banner_v60 = \"GHOST v6.0\" ascii\n // Competitor-displacement function — kills Hisana kit (16 cross-host hits confirmed in Hunt.io)\n $fn_anti_hisana = \"_anti_hisana\" ascii fullword\n // Rootkit build/install functions\n $fn_compile_so = \"_compile_hide_so\" ascii fullword\n $fn_install_preload = \"_install_preload\" ascii fullword\n // Container-escape suite — all 4 variants\n $fn_container_esc = \"_container_escape\" ascii fullword\n $fn_esc_cgroup = \"_escape_via_cgroup\" ascii fullword\n $fn_esc_mount = \"_escape_via_mount\" ascii fullword\n $fn_esc_nsenter = \"_escape_via_nsenter\" ascii fullword\n $fn_esc_socket = \"_escape_via_socket\" ascii fullword\n // Python kit builder function\n $fn_build_py = \"_build_python_fetcher\" ascii fullword\n // Resurrection watchdog function\n $fn_resurrection = \"_resurrection_loop\" ascii fullword\n condition:\n filesize < 200KB and\n ($banner_v51 or $banner_v60) and\n $fn_anti_hisana and\n ($fn_compile_so or $fn_install_preload) and\n ($fn_container_esc or ($fn_esc_cgroup and $fn_esc_mount) or ($fn_esc_nsenter and $fn_esc_socket)) and\n ($fn_build_py or $fn_resurrection)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--20314fe5-2964-5a0b-9286-1ed16f20a4e1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.744835Z", "modified": "2026-10-01T19:54:13.744835Z", "name": "MAL_Linux_GHOST_ComfyUI_Python_Kit", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_ComfyUI_Python_Kit {\n meta:\n description = \"Detects GHOST cryptojacker kit Python ComfyUI exploitation framework (py.py + scan.py) — Python scripts containing _build_python_fetcher downloader builder, PerformanceMonitor fake custom-node class, PIP_PAYLOAD_REPO GitHub URL config variable, and NODE_CLASS_MAPPINGS registration for ComfyUI persistence; 74KB+63KB kit shipped to both GHOST customer operators\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n hash1 = \"dc232b55329d95fe2a47a8d637b7bffea06f18e3d8332ba94b042b1862213a1d\"\n hash2 = \"9023734a70ee6a05d4ecd5466d0c5803f293601836deb00cc417a3add04bd93e\"\n hash3 = \"6e5d897c7fd0060c7da2394ad1bb3584827c216f8aadac4f6ed41b2d915f0070\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"Python ComfyUI Exploitation Framework\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"a4d3ff71-b85c-58f2-9e0e-c6f9300289f1\"\n strings:\n // Core exploitation functions unique to GHOST Python kit\n $fn_build_fetcher = \"_build_python_fetcher\" ascii fullword\n $fn_plant_node = \"plant_backdoor_node\" ascii fullword\n $fn_find_nodes = \"find_target_nodes\" ascii fullword\n // Fake custom-node class — persistence mechanism\n $class_perfmon = \"PerformanceMonitor\" ascii fullword\n // Kit supply-chain config variable\n $pip_payload_repo = \"PIP_PAYLOAD_REPO\" ascii fullword\n // ComfyUI node registration dicts\n $node_mappings = \"NODE_CLASS_MAPPINGS\" ascii fullword\n $node_display = \"NODE_DISPLAY_NAME_MAPPINGS\" ascii fullword\n // ComfyUI targeting fingerprint\n $comfyui_port = \"8188\" ascii\n $comfyui_stats = \"system_stats\" ascii\n condition:\n filesize < 200KB and\n ($fn_build_fetcher or $fn_plant_node or $fn_find_nodes) and\n $class_perfmon and\n ($pip_payload_repo or $node_mappings or $node_display) and\n ($comfyui_port or $comfyui_stats)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4182bc44-6b37-5f10-bbd3-b827e15835a5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T04:24:15.788014Z", "modified": "2026-10-11T05:07:58.513428Z", "name": "SUSP_Linux_ComfyUI_PerformanceMonitor_Node_Registration", "indicator_types": [ "malicious-activity" ], "pattern": "rule SUSP_Linux_ComfyUI_PerformanceMonitor_Node_Registration {\n meta:\n description = \"Detects a file under 500 KB that defines class PerformanceMonitor and contains NODE_CLASS_MAPPINGS plus either NODE_DISPLAY_NAME_MAPPINGS or the kit function name plant_backdoor_node. This is the registration pattern the GHOST cryptojacker kit uses for its planted persistence node, but the rule tests no malicious content, so a benign ComfyUI extension of that name also matches (confirmed by test on 2026-09-13); use it as a hunt rule for ComfyUI custom-node integrity audits\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n modified = \"2026-10-11\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"ComfyUI Custom Node Persistence Artifact\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"83b41b80-0cff-51a5-b77c-20831c55d118\"\n strings:\n // Malicious custom-node class registration — both dict assignments required\n $class_def = \"class PerformanceMonitor\" ascii\n $node_class_reg = \"NODE_CLASS_MAPPINGS\" ascii fullword\n $node_display_reg = \"NODE_DISPLAY_NAME_MAPPINGS\" ascii fullword\n // Ghost kit function that installs the node\n $fn_plant = \"plant_backdoor_node\" ascii fullword\n condition:\n filesize < 500KB and\n $class_def and\n $node_class_reg and\n ($node_display_reg or $fn_plant)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f4470d02-406f-5e86-8aad-0afb255bc3ad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.744985Z", "modified": "2026-10-11T05:07:58.513527Z", "name": "MAL_Linux_GHOST_Hysteria_Operator_Wrapper", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_Hysteria_Operator_Wrapper {\n meta:\n description = \"Hunting rule for a file under 30 KB that contains bing.com, two of the three /tmp/.hy2_ cache file names, and one of the panel port 3301, get.hy2.sh, api_vpn_report or the Russian heading НАСТРОЙКИ. It was written from the GHOST kit Hysteria v2 operator wrapper hyst.sh, but it does not require Russian text, certificate generation or the panel callback (get.hy2.sh or the port alone satisfies the last clause), and bing.com SNI masquerade and the .hy2_ cache names are shared with legitimate Hysteria v2 deployments\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n modified = \"2026-10-11\"\n hash1 = \"822afb1fb29f22df8c951726d492021df2940223ed719881dafb40cda3894c5c\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"Hysteria v2 Installer Wrapper\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"13a9762c-4653-5feb-8227-fc15eea54a4a\"\n strings:\n // Hysteria v2 bing.com SNI masquerade — common domain-fronting convention, not GHOST-exclusive\n $sni_masquerade = \"bing.com\" ascii fullword\n // Hysteria credential cache file pattern in /tmp\n $hy2_password = \".hy2_password\" ascii\n $hy2_port = \".hy2_port\" ascii\n $hy2_uri = \".hy2_uri\" ascii\n // Admin panel port reference (3301 = Hysteria panel)\n $panel_port = \"3301\" ascii\n // Hysteria installer download source\n $installer_hy2 = \"get.hy2.sh\" ascii\n // Russian operator comments (Cyrillic — confirming operator-authored)\n $ru_installs = \"\\xD0\\x9D\\xD0\\x90\\xD0\\xA1\\xD0\\xA2\\xD0\\xA0\\xD0\\x99\\xD0\\x9A\\xD0\\x98\" ascii // НАСТРОЙКИ\n // Operator panel API callback function name\n $api_vpn_report = \"api_vpn_report\" ascii fullword\n condition:\n filesize < 30KB and\n $sni_masquerade and\n 2 of ($hy2_*) and\n ($panel_port or $installer_hy2 or $api_vpn_report or $ru_installs)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4d021958-4d7d-5ffe-8031-6ebb99e5279e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.745058Z", "modified": "2026-10-01T19:54:13.745058Z", "name": "MAL_Linux_GHOST_min1_DualTelegram_Wrapper", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_min1_DualTelegram_Wrapper {\n meta:\n description = \"Detects GHOST cryptojacker kit miner installer wrapper min1.sh via three independent paths: the kit-author OWNER Telegram bot token prefix 8415540095:, OR the paired bilingual Russian TELEGRAM (OWNER)/TELEGRAM (MIRROR) comment-label structure, OR a function tg definition combined with a Kryptex pool domain or install_xmrig; salvaged from a bot-token-only condition so detection survives bot-token rotation\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n hash1 = \"008bc5ab73e75bb76131f91d68a3792d9e4393137c14afe8c44d44be2a2c46f6\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"Miner Installer / Dual-Telegram Supply-Chain Wrapper\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"8dc8ca76-896a-58b9-b88c-4ab6cf8c7e6c\"\n strings:\n // Path 1: kit-author OWNER bot token prefix (atomic; already in IOC feed) — kept as one of three OR-paths, not the sole gate\n $owner_bot_prefix = \"8415540095:\" ascii\n // Path 2: dual-Telegram bilingual comment-label structure (Russian: OWNER + MIRROR) — kit-authorship pattern, bot-ID-independent\n $tg_owner_comment = \"TELEGRAM (\\xD0\\x92\\xD0\\x9B\\xD0\\x90\\xD0\\x94\\xD0\\x95\\xD0\\x9B\\xD0\\x95\\xD0\\xA6)\" ascii // TELEGRAM (ВЛАДЕЛЕЦ)\n $tg_mirror_comment = \"TELEGRAM (\\xD0\\x97\\xD0\\x95\\xD0\\xA0\\xD0\\x9A\\xD0\\x90\\xD0\\x9B\\xD0\\x9E)\" ascii // TELEGRAM (ЗЕРКАЛО)\n // Path 3: function tg + Kryptex pool domain or install_xmrig function name\n $pool_xmr_kryptex = \"xmr.kryptex.network\" ascii\n $pool_etc_kryptex = \"etc.kryptex.network\" ascii\n $fn_install_xmrig = \"install_xmrig\" ascii fullword\n $fn_tg = \"function tg\" ascii\n condition:\n filesize < 30KB and\n (\n $owner_bot_prefix or\n ($tg_owner_comment and $tg_mirror_comment) or\n ($fn_tg and ($pool_xmr_kryptex or $pool_etc_kryptex or $fn_install_xmrig))\n )\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--07bfb3d0-8f9f-5216-8a80-1a52264e3174", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.74513Z", "modified": "2026-10-01T19:54:13.74513Z", "name": "MAL_Linux_GHOST_check_comfyui_Scanner", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_check_comfyui_Scanner {\n meta:\n description = \"Detects GHOST cryptojacker kit ComfyUI target verification script check_comfyui.sh — Bash script probing port 8188 /system_stats and /queue for ComfyUI identification, classifying results into sc_comfy/sc_manager/sc_nodes/sc_vuln output files; Russian-language comments; scanning component of GHOST ComfyUI exploitation pipeline\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n hash1 = \"9023734a70ee6a05d4ecd5466d0c5803f293601836deb00cc417a3add04bd93e\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"ComfyUI Target Scanner\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"39b7fb48-31ec-5b1d-b787-2935cad5a60e\"\n strings:\n // ComfyUI probe endpoints\n $probe_system_stats = \"system_stats\" ascii\n $probe_object_info = \"object_info\" ascii\n $probe_queue = \"/queue\" ascii\n // GHOST-specific output file naming convention\n $out_sc_comfy = \"sc_comfy\" ascii\n $out_sc_manager = \"sc_manager\" ascii\n $out_sc_nodes = \"sc_nodes\" ascii\n $out_sc_vuln = \"sc_vuln\" ascii\n // ComfyUI port\n $port_8188 = \"8188\" ascii\n condition:\n filesize < 10KB and\n $port_8188 and\n ($probe_system_stats or $probe_object_info or $probe_queue) and\n 2 of ($out_*)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dce86bf3-3e8c-506b-ae70-83f378e532d6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.745202Z", "modified": "2026-10-11T14:08:24.271839Z", "name": "MAL_Linux_GHOST_get_all_ranges_CloudEnumerator", "indicator_types": [ "malicious-activity" ], "pattern": "rule MAL_Linux_GHOST_get_all_ranges_CloudEnumerator {\n meta:\n description = \"Detects GHOST cryptojacker kit cloud-provider IP-range enumeration script get_all_ranges.sh — text file under 15 KB naming bgpview.io, its /asn/ path and at least two of five cloud-provider names (Lambda Labs, Nebius, Datacrunch, Contabo, Hetzner); the sample queries 14+ providers including GPU-cloud ones, but any two of the five names satisfy the rule (Contabo and Hetzner alone do); reconnaissance prequel to ComfyUI exploitation pipeline targeting GPU-cloud environments\"\n license = \"CC BY 4.0 - https://creativecommons.org/licenses/by/4.0/\"\n author = \"The Hunters Ledger\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\"\n date = \"2026-05-25\"\n family = \"GHOST-cryptojacker-kit\"\n malware_type = \"Cloud IP-Range Enumerator\"\n campaign = \"OpenDirectory-GHOST-Cryptojacker-Vova75Rus-77.110.96.200\"\n id = \"61f9da50-05bf-5c1c-933a-2a65a73eeae3\"\n strings:\n // bgpview.io API source (used for ASN-to-IP-range lookups)\n $bgpview_api = \"bgpview.io\" ascii\n // Provider names from the sample's ASN list (the first three are GPU-cloud providers);\n // any two of the five names satisfy the condition, so this is not a GPU-cloud-specific test\n $provider_lambda = \"Lambda Labs\" ascii\n $provider_nebius = \"Nebius\" ascii\n $provider_datacrunch = \"Datacrunch\" ascii\n // Additional providers from get_all_ranges.sh ASN list\n $provider_contabo = \"Contabo\" ascii\n $provider_hetzner = \"Hetzner\" ascii\n // bgpview.io API structure specific to this script\n $bgpview_ips_prefix = \"bgpview.io/asn/\" ascii\n condition:\n filesize < 15KB and\n $bgpview_api and\n $bgpview_ips_prefix and\n 2 of ($provider_*)\n}", "pattern_type": "yara", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a484fc2f-55e0-5e06-9140-470c6da5d93f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.745274Z", "modified": "2026-10-01T19:54:13.745274Z", "name": "Linux LD_PRELOAD Persistence File Modification", "indicator_types": [ "malicious-activity" ], "pattern": "title: Linux LD_PRELOAD Persistence File Modification\nid: f67e016e-dcd7-4ee3-a2ee-9477ad7f75c2\nstatus: experimental\ndescription: >-\n Detects write or create operations on /etc/ld.so.preload by non-package-manager\n processes. The GHOST cryptojacker kit writes this file to globally load\n libpam_cache.so into all system processes for LD_PRELOAD rootkit persistence.\n Modification of this file by a shell, curl, or miner process is a high-confidence\n indicator of LD_PRELOAD rootkit installation.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\n - https://censys.com/ghost-cryptojacker-targeting-ai\nauthor: The Hunters Ledger\ndate: 2026-05-25\ntags:\n - attack.persistence\n - attack.stealth\n - attack.execution\n - attack.t1574.006\n - detection.emerging-threats\nlogsource:\n category: file_event\n product: linux\ndetection:\n selection_path:\n TargetFilename: '/etc/ld.so.preload'\n filter_pkg_mgr:\n Image|endswith:\n - '/dpkg'\n - '/apt'\n - '/apt-get'\n - '/ldconfig'\n - '/update-alternatives'\n - '/rpm'\n - '/yum'\n - '/dnf'\n condition: selection_path and not filter_pkg_mgr\nfalsepositives:\n - >-\n System administrators manually adding a legitimate preload library for\n debugging or performance purposes (rare; verify path added to the file)\n - Package post-install scripts using ldconfig or update-alternatives to\n register new shared libraries\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a1f7f480-7372-5967-950f-f5d9b8c4728c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.745347Z", "modified": "2026-10-01T19:54:13.745347Z", "name": "Suspicious Shared Library Created in PAM Security Directory", "indicator_types": [ "malicious-activity" ], "pattern": "title: Suspicious Shared Library Created in PAM Security Directory\nid: 21b2646a-7e0b-4d6c-8392-d976b8388fa3\nstatus: experimental\ndescription: >-\n Detects creation of a .so shared library file in /lib/security/ or similar PAM\n module directories by non-package-manager processes. The GHOST cryptojacker kit\n drops libpam_cache.so into /lib/security/ using PAM-style filename camouflage as\n a deceptive LD_PRELOAD rootkit. Legitimate PAM modules are always installed via\n package management — direct file creation from a shell or download tool indicates\n rootkit deployment.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\n - https://censys.com/ghost-cryptojacker-targeting-ai\nauthor: The Hunters Ledger\ndate: 2026-05-25\ntags:\n - attack.stealth\n - attack.persistence\n - attack.execution\n - attack.t1574.006\n - attack.t1014\n - detection.emerging-threats\nlogsource:\n category: file_event\n product: linux\ndetection:\n selection_path:\n TargetFilename|startswith:\n - '/lib/security/'\n - '/lib/x86_64-linux-gnu/security/'\n - '/usr/lib/security/'\n - '/usr/lib/x86_64-linux-gnu/security/'\n TargetFilename|endswith: '.so'\n filter_pkg_mgr:\n Image|endswith:\n - '/dpkg'\n - '/apt'\n - '/apt-get'\n - '/rpm'\n - '/yum'\n - '/dnf'\n - '/ldconfig'\n condition: selection_path and not filter_pkg_mgr\nfalsepositives:\n - >-\n Legitimate PAM module installation by package manager (filtered by\n exclusion above — confirm filter is working)\n - Manual PAM plugin deployment by system administrator (require change\n management verification)\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0f66f4ac-ff48-52cf-a0a0-f877dc42b4a4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T14:08:24.272138Z", "modified": "2026-10-11T14:08:24.272138Z", "name": "GHOST Kit Camouflage Name in a Created File Path (Systemd Unit Names and inotify_guard)", "indicator_types": [ "malicious-activity" ], "pattern": "title: GHOST Kit Camouflage Name in a Created File Path (Systemd Unit Names and inotify_guard)\nid: 16fce30a-b59f-461c-87fc-89ae2d736527\nstatus: experimental\ndescription: >-\n Detects creation of a file whose path contains one of seven GHOST cryptojacker\n kit camouflage names. Six are `.service` unit names (the kit installs\n fontconfig-cache.service as user-level systemd persistence disguised as\n fontconfig caching; operator processes are renamed to dbus-session-monitor\n (xmrig) and gnome-shell-ext-updater (lolMiner)). The seventh, inotify_guard,\n is the kit's watchdog process name; with no suffix or directory test it\n matches any created file path that contains it. The rule has no process or\n package-manager filter, so a package manager creating one of these files also\n matches. The kit's system unit systemd-journal-flush.service uses the name of\n a real systemd unit and is not matched.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026-05-25\ntags:\n - attack.persistence\n - attack.privilege-escalation\n - attack.stealth\n - attack.t1543.002\n - attack.t1036.005\n - detection.emerging-threats\n - stp.3\nlogsource:\n category: file_event\n product: linux\ndetection:\n selection_ghost_unit_names:\n TargetFilename|contains:\n - 'fontconfig-cache.service'\n - 'inotify_guard'\n - 'dbus-session-monitor.service'\n - 'gnome-shell-ext-updater.service'\n - 'archivist-daemon.service'\n - 'journald-svc.service'\n - 'systemd-guard.service'\n condition: selection_ghost_unit_names\nfalsepositives:\n - >-\n Custom legitimate service deployments using similar names (extremely\n unlikely for fontconfig-cache.service or gnome-shell-ext-updater.service\n as systemd units)\n - >-\n Desktop environment package that legitimately provides\n gnome-shell-ext-updater (verify package manager ownership with dpkg -S\n or rpm -qf)\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9fae4a61-8e3a-5de2-9212-f438f5be456f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.745633Z", "modified": "2026-10-01T19:54:13.745633Z", "name": "Chattr Immutable Bit Set on Linux Persistence Target Paths", "indicator_types": [ "malicious-activity" ], "pattern": "title: Chattr Immutable Bit Set on Linux Persistence Target Paths\nid: f83a039f-885d-4759-a89c-2156a54e7ea5\nstatus: experimental\ndescription: >-\n Detects chattr +i (set immutable bit) invoked against system persistence file\n paths. The GHOST cryptojacker kit's _lock_files function uses chattr +i on\n /etc/ld.so.preload, /lib/security/libpam_cache.so, and miner binary copies\n to block rm operations by defenders and automated cleanup scripts. Setting the\n immutable bit on LD_PRELOAD-related or PAM-security-directory files is\n exclusively an anti-removal tradecraft technique — no legitimate use case exists.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026-05-25\ntags:\n - attack.stealth\n - attack.defense-impairment\n - attack.persistence\n - attack.execution\n - attack.t1222.002\n - attack.t1574.006\n - detection.emerging-threats\nlogsource:\n category: process_creation\n product: linux\ndetection:\n selection_chattr:\n Image|endswith: '/chattr'\n CommandLine|contains: '+i'\n selection_sensitive_paths:\n CommandLine|contains:\n - '/etc/ld.so.preload'\n - '/lib/security/'\n - '/etc/init.d/'\n - '/etc/systemd/system/'\n condition: selection_chattr and selection_sensitive_paths\nfalsepositives:\n - >-\n System hardening scripts that legitimately use chattr +i on selected\n configuration files (review CIS benchmark hardening scripts)\n - >-\n Container image build processes that lock certain system files (rare;\n typically not in /lib/security paths)\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5956f922-e13f-5a7e-962b-b6d0f2d499b8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.745706Z", "modified": "2026-10-01T19:54:13.745706Z", "name": "Suspicious LD_PRELOAD Set to Non-Standard Library Path", "indicator_types": [ "malicious-activity" ], "pattern": "title: Suspicious LD_PRELOAD Set to Non-Standard Library Path\nid: 5cd034e9-ac04-4178-8a16-95f291c5d805\nstatus: experimental\ndescription: >-\n Detects Linux processes launched with LD_PRELOAD environment variable pointing to\n non-standard shared library paths such as /tmp/, /var/tmp/, /home/, or custom\n XDG cache paths. The GHOST cryptojacker kit's _compile_hide_so and _install_preload\n functions may set LD_PRELOAD during rootkit deployment before writing the persistent\n /etc/ld.so.preload entry. Legitimate LD_PRELOAD usage targets well-known system\n library paths only.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026-05-25\ntags:\n - attack.stealth\n - attack.persistence\n - attack.execution\n - attack.t1574.006\n - detection.emerging-threats\nlogsource:\n category: process_creation\n product: linux\ndetection:\n selection_env:\n CommandLine|contains:\n - 'LD_PRELOAD=/tmp/'\n - 'LD_PRELOAD=/var/tmp/'\n - 'LD_PRELOAD=/home/'\n - 'LD_PRELOAD=/root/'\n - 'LD_PRELOAD=./lib'\n - 'LD_PRELOAD=/dev/shm/'\n condition: selection_env\nfalsepositives:\n - >-\n Debugging or performance testing tools (ltrace, strace wrappers,\n faketime) using LD_PRELOAD with temporary paths\n - >-\n Software build systems that test custom shared libraries from temp\n directories\n - Some container runtimes that set LD_PRELOAD during container initialization\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--56a586e2-920f-5244-878c-6685f27aebd5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T04:24:15.78937Z", "modified": "2026-10-11T05:07:58.514531Z", "name": "Ncat Listener Creation on Linux Host", "indicator_types": [ "malicious-activity" ], "pattern": "title: Ncat Listener Creation on Linux Host\nid: 4639e400-9a7d-495f-b7a3-a06de5f3c7db\nstatus: experimental\ndescription: >-\n Detects ncat -l listener creation on a Linux host. The GHOST cryptojacker\n Operator-A showed 83 ncat invocations in bash history — the highest\n command frequency — indicating chronic use of ncat for port testing, makeshift\n backdoor channels, and lateral-movement probing. This rule matches any single\n ncat -l invocation. The report gives the total count in the bash history and\n no per-hour rate, so no frequency threshold is claimed or implemented here.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026-05-25\nmodified: 2026-10-11\ntags:\n - attack.command-and-control\n - attack.execution\n - attack.t1059.004\n - attack.t1571\n - detection.emerging-threats\nlogsource:\n category: process_creation\n product: linux\ndetection:\n selection_ncat_listener:\n Image|endswith:\n - '/ncat'\n - '/nc'\n - '/netcat'\n CommandLine|contains: ' -l'\n condition: selection_ncat_listener\nfalsepositives:\n - Authorized network testing activities using ncat in controlled environments\n - Security engineers running port testing scripts on network infrastructure hosts\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--145d5f2f-e312-59ac-85eb-7144c65069e6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T04:24:15.789482Z", "modified": "2026-10-11T04:24:15.789482Z", "name": "Hysteria Proxy Process Execution on Linux Server", "indicator_types": [ "malicious-activity" ], "pattern": "title: Hysteria Proxy Process Execution on Linux Server\nid: e01c6689-1d47-4f6c-bf23-a71b32d88375\nstatus: experimental\ndescription: >-\n Detects execution of a process whose image ends in /hysteria or whose command line\n contains hysteria-server on a Linux host. The rule has no version or QUIC test, so\n Hysteria 1 and Hysteria 2 both match. The GHOST cryptojacker\n kit installs Hysteria v2 as a covert QUIC/UDP backdoor with bing.com SNI masquerade\n (ports 14433/14444 UDP) using hyst.sh installer. Hysteria v2 is legitimate dual-use\n software; execution on a production GPU server or ML workload host with no expected\n business purpose is a scoping lead for GHOST kit compromise, not a malware-specific\n signature on its own. The process is installed as systemd service\n hysteria-server.service with binaries in /usr/local/bin/hysteria.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\n - https://censys.com/ghost-cryptojacker-targeting-ai\nauthor: The Hunters Ledger\ndate: 2026-05-25\nmodified: 2026-10-11\ntags:\n - attack.command-and-control\n - attack.t1572\n - detection.emerging-threats\nlogsource:\n category: process_creation\n product: linux\ndetection:\n selection_hysteria:\n Image|endswith: '/hysteria'\n selection_hysteria_service:\n CommandLine|contains: 'hysteria-server'\n condition: selection_hysteria or selection_hysteria_service\nfalsepositives:\n - >-\n Legitimate Hysteria v2 usage for censorship circumvention by employees\n in restrictive-internet regions (rare in corporate GPU environments;\n verify with owner)\n - Authorized network testing using Hysteria for VPN / proxy research purposes\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--390b3d5a-0fee-5f7b-9a4e-87e083b0e3ab", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T04:24:15.789594Z", "modified": "2026-10-11T05:07:58.514729Z", "name": "memfd_create Syscall Outside a Java, Browser and Node Filter on Linux Server", "indicator_types": [ "malicious-activity" ], "pattern": "title: memfd_create Syscall Outside a Java, Browser and Node Filter on Linux Server\nid: 3d5c184d-4937-4ab0-93d6-778760e59b9c\nstatus: experimental\ndescription: >-\n Detects a memfd_create() syscall record on a Linux server whose exe does not\n contain java, chrome, chromium, firefox or node. The rule matches a single\n event and has no frequency threshold. The GHOST cryptojacker kit's _memfd_exec function uses\n memfd_create to create anonymous in-memory file descriptors for fileless xmrig and\n lolMiner execution via execveat(), bypassing on-disk file scanning. Requires\n auditd syscall monitoring with \"-a always,exit -F arch=b64 -S memfd_create -k\n fileless_exec\" rule active; raw auditd records the syscall as the number 319\n on x86_64, so the selection accepts the name or that number. memfd_create is also used by a broad legitimate\n ecosystem (systemd, container runtimes, sandboxing tools, FFI libraries) beyond\n the JVM/browser/Node filter below, so this is a scoping lead requiring\n process-ancestry tuning rather than an auto-alert.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026-05-25\nmodified: 2026-10-11\ntags:\n - attack.stealth\n - attack.t1620\n - detection.emerging-threats\nlogsource:\n product: linux\n service: auditd\n definition: 'Requires auditd SYSCALL records for memfd_create from the audit rule named in the description. Raw auditd logs the syscall as a number (319 on x86_64) with the executable in the same record; an interpreted profile (ausearch -i, or an ingestion that translates syscall numbers) logs the name. The rule matches both forms, 319 is the x86_64 number only, and no Sysmon for Linux mapping to this record exists.'\ndetection:\n selection_memfd:\n type: 'SYSCALL'\n syscall:\n - 'memfd_create'\n - 319\n filter_expected:\n exe|contains:\n - 'java'\n - 'chrome'\n - 'chromium'\n - 'firefox'\n - 'node'\n condition: selection_memfd and not filter_expected\nfalsepositives:\n - >-\n JVM-based applications (Java, Kotlin, Groovy) using memfd_create for\n native library loading — excluded by filter above\n - >-\n Python FFI libraries (ctypes, cffi) using memfd_create for anonymous\n shared memory\n - Legitimate fileless deployment tools used by authorized DevOps processes\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--483c47cf-2e33-5a9b-b8cf-3959e100d49e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T04:24:15.788818Z", "modified": "2026-10-11T05:07:58.514834Z", "name": "Auditd - PAM Security Library Directory File Creation by Non-Package-Manager", "indicator_types": [ "malicious-activity" ], "pattern": "title: Auditd - PAM Security Library Directory File Creation by Non-Package-Manager\nid: f26bb12b-dca1-4b62-adf1-9186d5d31560\nstatus: experimental\ndescription: >-\n Detects an auditd PATH record with nametype CREATE (a new file created) under\n /lib/security/. Requires auditd rule \"-w /lib/security -p wa -k pam_module_write\"\n to be active, and joined PATH and SYSCALL record fields (see the definition). The\n GHOST cryptojacker kit writes libpam_cache.so to this directory using PAM-style\n filename camouflage; a new file there from a non-package-manager process is a\n strong lead for a rootkit drop. The rule does not test an open-for-write\n flag (a PATH record carries no such flag), and an overwrite of an existing file,\n which carries another nametype, is not matched.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\nauthor: The Hunters Ledger\ndate: 2026-05-25\nmodified: 2026-10-11\ntags:\n - attack.stealth\n - attack.persistence\n - attack.execution\n - attack.t1574.006\n - attack.t1014\n - detection.emerging-threats\nlogsource:\n product: linux\n service: auditd\n definition: 'Requires auditd events in which the PATH record fields (name, nametype) and the SYSCALL record fields (key, exe) of one event are joined into one document, for example by ausearch -i output keyed on the event serial or an ingestion that merges records. Raw auditd keeps them in separate records: PATH carries name and nametype, SYSCALL carries the watch key and exe. No joined profile has been demonstrated for this rule.'\ndetection:\n selection_key:\n key: 'pam_module_write'\n name|contains: '/lib/security/'\n nametype: 'CREATE'\n filter_pkg_mgr:\n exe|endswith:\n - '/dpkg'\n - '/rpm'\n - '/ldconfig'\n - '/update-alternatives'\n condition: selection_key and not filter_pkg_mgr\nfalsepositives:\n - Package manager post-install hooks installing legitimate PAM modules (filtered above)\n - System administrator manually copying a verified PAM module during maintenance\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8489f391-5119-54e4-b79a-1c4fad695970", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T07:05:19.534335Z", "modified": "2026-10-11T07:05:19.534335Z", "name": "ComfyUI Custom Node Python File With a PerformanceMonitor Path Prefix Created", "indicator_types": [ "malicious-activity" ], "pattern": "title: ComfyUI Custom Node Python File With a PerformanceMonitor Path Prefix Created\nid: df247923-595c-4760-9a97-f0722dbf664d\nstatus: experimental\ndescription: >-\n Detects creation of a Python file whose path contains\n /custom_nodes/PerformanceMonitor, a path-prefix match that also accepts\n PerformanceMonitorOther.py and files inside a PerformanceMonitor directory. The GHOST Python kit's plant_backdoor_node()\n function registers a PerformanceMonitor class in the victim's ComfyUI custom_nodes/\n directory (the report does not give the planted file's name), and a legitimate extension with the same name prefix creates the same\n event, so a hit needs publisher and source verification. Tightened from an earlier selector that also matched\n any .py file under a ComfyUI custom_nodes/ path regardless of filename, which\n would have fired on every legitimate custom-node installation.\nreferences:\n - https://the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/\n - https://censys.com/ghost-cryptojacker-targeting-ai\nauthor: The Hunters Ledger\ndate: 2026-05-25\ntags:\n - attack.persistence\n - attack.t1554\n - detection.emerging-threats\n - stp.2\nlogsource:\n category: file_event\n product: linux\ndetection:\n selection_comfyui_node:\n TargetFilename|contains: '/custom_nodes/PerformanceMonitor'\n TargetFilename|endswith: '.py'\n condition: selection_comfyui_node\nfalsepositives:\n - >-\n Legitimate custom ComfyUI node named PerformanceMonitor installed by\n authorized user (verify publisher and source repository before dismissing)\n - >-\n Development environments where a test custom node happens to share this\n name (scope exclusion for known dev hosts recommended)\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1bfe229f-9656-57a6-bf96-7c53c78d776d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.746Z", "modified": "2026-10-01T19:54:13.746Z", "name": "THL DETECT GHOST Cryptojacker Kit Distribution File Download from AEZA Hosting Range", "indicator_types": [ "malicious-activity" ], "pattern": "alert http $HOME_NET any -> 77.110.0.0/16 any (msg:\"THL DETECT GHOST Cryptojacker Kit Distribution File Download from AEZA Hosting Range\"; flow:established,to_server; http.uri; pcre:\"/\\/(libpam_cache\\.so|ghost\\.sh|hyst\\.sh|min1\\.sh|libpam_cache\\.c)$/\"; reference:url,the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/; classtype:trojan-activity; sid:9100104; rev:3; metadata:author The_Hunters_Ledger, date 2026-05-25, tag Dropper, tag GHOST_kit;)", "pattern_type": "suricata", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4004ac82-6f13-5504-8b3f-0805cc63a58d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.746072Z", "modified": "2026-10-01T19:54:13.746072Z", "name": "THL HUNT GHOST Cryptojacker Kit Hysteria v2 QUIC Initial on Operator Ports (Hunt Lead, Corroborate Before Escalating)", "indicator_types": [ "malicious-activity" ], "pattern": "alert udp $HOME_NET any -> $EXTERNAL_NET 14433:14444 (msg:\"THL HUNT GHOST Cryptojacker Kit Hysteria v2 QUIC Initial on Operator Ports (Hunt Lead, Corroborate Before Escalating)\"; dsize:>=1200; byte_test:1,=,0xC,0,bitmask 0xF0; content:\"|00 00 00 01|\"; offset:1; depth:4; threshold:type limit,track by_src,count 1,seconds 3600; reference:url,the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/; classtype:policy-violation; sid:9100103; rev:5; metadata:author The_Hunters_Ledger, date 2026-05-25, modified 2026-09-30, signature_severity Minor, tag Backdoor, tag GHOST_kit, tag Hysteria_v2;)", "pattern_type": "suricata", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--30384888-d981-5a3b-a864-0bef5c3c22ad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T14:08:24.273122Z", "modified": "2026-10-11T14:08:24.273122Z", "name": "THL HUNT GHOST Cryptojacker Kit QUIC v1 Initial Inbound to Candidate Hysteria Listener Ports 14433-14444 (Hunt Lead, Corroborate Before Escalating)", "indicator_types": [ "malicious-activity" ], "pattern": "alert udp $EXTERNAL_NET any -> $HOME_NET 14433:14444 (msg:\"THL HUNT GHOST Cryptojacker Kit QUIC v1 Initial Inbound to Candidate Hysteria Listener Ports 14433-14444 (Hunt Lead, Corroborate Before Escalating)\"; dsize:>=1200; byte_test:1,=,0xC,0,bitmask 0xF0; content:\"|00 00 00 01|\"; offset:1; depth:4; threshold:type limit,track by_dst,count 1,seconds 3600; reference:url,the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/; classtype:policy-violation; sid:9100109; rev:3; metadata:author The_Hunters_Ledger, date 2026-09-30, signature_severity Minor, tag Backdoor, tag GHOST_kit, tag Hysteria_v2;)", "pattern_type": "suricata", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2beb4dc7-06d9-5c7f-8570-934e77fc5a4a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T04:24:15.790131Z", "modified": "2026-10-11T05:07:58.515236Z", "name": "THL HUNT Telegram API TLS SNI Egress from an Internal Host (Reporting Channel Used by the GHOST Kit, Not Specific to It)", "indicator_types": [ "malicious-activity" ], "pattern": "alert tls $HOME_NET any -> any any (msg:\"THL HUNT Telegram API TLS SNI Egress from an Internal Host (Reporting Channel Used by the GHOST Kit, Not Specific to It)\"; tls.sni; content:\"api.telegram.org\"; startswith; endswith; nocase; threshold:type threshold,track by_src,count 5,seconds 300; reference:url,the-hunters-ledger.com/hunting-detections/ghost-cryptojacker-vova75rus-77.110.96.200-detections/; classtype:policy-violation; sid:9100108; rev:5; metadata:author The_Hunters_Ledger, date 2026-05-25, tag GHOST_kit, tag Telegram_reporting;)", "pattern_type": "suricata", "valid_from": "2026-05-25T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.746298Z", "modified": "2026-10-01T19:54:13.746298Z", "name": "GHOST cryptojacker kit", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.746377Z", "modified": "2026-10-01T19:54:13.746377Z", "name": "libpam_cache.so LD_PRELOAD rootkit", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.746447Z", "modified": "2026-10-01T19:54:13.746447Z", "name": "Hysteria v2 backdoor", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.746512Z", "modified": "2026-10-01T19:54:13.746512Z", "name": "ComfyUI exploitation framework (Python + fake PerformanceMonitor custom node)", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.746575Z", "modified": "2026-10-01T19:54:13.746575Z", "name": "UnamWebPanel (upstream PHP admin panel from UnamSanctam OSS portfolio)", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.746637Z", "modified": "2026-10-01T19:54:13.746637Z", "name": "xmrig (legitimate upstream Monero miner used by operator)", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.746698Z", "modified": "2026-10-01T19:54:13.746698Z", "name": "lolMiner (legitimate upstream Conflux/ETC miner used by operator)", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.746883Z", "modified": "2026-10-01T19:54:13.746883Z", "name": "min1.sh", "description": "Operator-A miner-only installer with DUAL-TELEGRAM (OWNER bot 8415540095 kit-author baked + MIRROR bot 8315596543 operator-set); 0/53 VT (UNDETECTED); Last Modified 2026-05-24T17:10:29Z (operator actively iterating)", "malware_types": [ "backdoor" ], "is_family": false, "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--c56f982b-3d7f-5540-91f5-8575d8315c67", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.746974Z", "modified": "2026-10-01T19:54:13.746974Z", "name": "Operator-A bash command history recovered from 77.110.96.200 open directory; 1472 lines; 48 unique Cyrillic words; MIRROR Telegram bot token 8315596543:... typed in plaintext and NEVER cleared", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.747053Z", "modified": "2026-10-01T19:54:13.747053Z", "name": "hyst.sh", "description": "Operator-A Hysteria v2 backdoor installer; Russian-language operator wrapper (10 Cyrillic words); admin panel callback http://77.110.96.200:3301; bing.com SNI masquerade; NOT IN VT", "malware_types": [ "backdoor" ], "is_family": false, "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.747133Z", "modified": "2026-10-01T19:54:13.747133Z", "name": "get_all_ranges.sh", "description": "Operator-A cloud IP-range scraper; Russian-language (4 Cyrillic words); 12 bgpview.io ASN queries + Oracle + Google official ranges; feeds ComfyUI scanner pipeline", "malware_types": [ "backdoor" ], "is_family": false, "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.747212Z", "modified": "2026-10-01T19:54:13.747212Z", "name": "check_comfyui.sh", "description": "Operator-A ComfyUI target verification script; Russian-language (4 Cyrillic words including ИТОГО, Найдено); GETs /system_stats and /queue endpoints on port 8188", "malware_types": [ "backdoor" ], "is_family": false, "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.747291Z", "modified": "2026-10-01T19:54:13.747291Z", "name": "ghost.sh", "description": "Operator-A copy (77.110.96.200) - 1338-line Bash installer GHOST v5.1; 43 functions including 4 container-escape variants; VT 13/63 with only generic signatures (Symantec PUA.Gen.2, Kaspersky HEUR:Downloader.Shell.Miner.a, Microsoft Trojan:Script/Wacatac.B!ml)", "malware_types": [ "backdoor" ], "is_family": false, "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.747367Z", "modified": "2026-10-01T19:54:13.747367Z", "name": "libpam_cache.so", "description": "LD_PRELOAD userland rootkit ELF64 - BYTE-IDENTICAL across both customer hosts 77.110.96.200 and 77.110.125.145; refutes per-victim compilation; GCC 13.3.0 Ubuntu 24.04 GLIBC 2.34+; 0/0 VT detections (never scanned)", "malware_types": [ "backdoor" ], "is_family": false, "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.747445Z", "modified": "2026-10-01T19:54:13.747445Z", "name": "libpam_cache.c", "description": "98-line C source for the rootkit - shipped alongside binary for victim-side recompile (kit-author practice); NOT IN VT", "malware_types": [ "backdoor" ], "is_family": false, "confidence": 95, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.747517Z", "modified": "2026-10-01T19:54:13.747517Z", "name": "Acquire Infrastructure: Virtual Private Server", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1583/003", "external_id": "T1583.003" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.747624Z", "modified": "2026-10-01T19:54:13.747624Z", "name": "Develop Capabilities: Malware", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1587/001", "external_id": "T1587.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.747712Z", "modified": "2026-10-01T19:54:13.747712Z", "name": "Establish Accounts: Social Media", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1585/001", "external_id": "T1585.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.747792Z", "modified": "2026-10-01T19:54:13.747792Z", "name": "Exploit Public-Facing Application", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1190", "external_id": "T1190" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.747877Z", "modified": "2026-10-01T19:54:13.747877Z", "name": "Command and Scripting Interpreter: Unix Shell", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1059/004", "external_id": "T1059.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.747953Z", "modified": "2026-10-01T19:54:13.747953Z", "name": "Command and Scripting Interpreter: Python", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1059/006", "external_id": "T1059.006" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.748029Z", "modified": "2026-10-01T19:54:13.748029Z", "name": "Shared Modules (LD_PRELOAD)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1129", "external_id": "T1129" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.748104Z", "modified": "2026-10-01T19:54:13.748104Z", "name": "Boot or Logon Autostart Execution: XDG Autostart Entries", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1547/013", "external_id": "T1547.013" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.74818Z", "modified": "2026-10-01T19:54:13.74818Z", "name": "Create or Modify System Process: Systemd Service", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1543/002", "external_id": "T1543.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.748257Z", "modified": "2026-10-01T19:54:13.748257Z", "name": "Scheduled Task/Job: Cron", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1053/003", "external_id": "T1053.003" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.748332Z", "modified": "2026-10-01T19:54:13.748332Z", "name": "Boot or Logon Initialization Scripts: RC Scripts", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1037/004", "external_id": "T1037.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.748407Z", "modified": "2026-10-01T19:54:13.748407Z", "name": "Hijack Execution Flow: Dynamic Linker Hijacking", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1574/006", "external_id": "T1574.006" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.748483Z", "modified": "2026-10-01T19:54:13.748483Z", "name": "Compromise Host Software Binary", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1554", "external_id": "T1554" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.748561Z", "modified": "2026-10-01T19:54:13.748561Z", "name": "Escape to Host (4 container-escape variants)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1611", "external_id": "T1611" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.748637Z", "modified": "2026-10-01T19:54:13.748637Z", "name": "Rootkit", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1014", "external_id": "T1014" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.748713Z", "modified": "2026-10-01T19:54:13.748713Z", "name": "Hide Artifacts: Hidden Files and Directories", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1564/001", "external_id": "T1564.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.74879Z", "modified": "2026-10-01T19:54:13.74879Z", "name": "Hide Artifacts (ports via /proc/net/tcp fopen hook)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1564", "external_id": "T1564" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.748871Z", "modified": "2026-10-01T19:54:13.748871Z", "name": "Obfuscated Files or Information (deceptive PAM filename)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1027", "external_id": "T1027" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.748947Z", "modified": "2026-10-01T19:54:13.748947Z", "name": "Masquerading: Match Legitimate Name or Location", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1036/005", "external_id": "T1036.005" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.749023Z", "modified": "2026-10-01T19:54:13.749023Z", "name": "Reflective Code Loading (memfd_create)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1620", "external_id": "T1620" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.749098Z", "modified": "2026-10-01T19:54:13.749098Z", "name": "Clear Linux or Mac System Logs", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1685/006", "external_id": "T1685.006" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.749174Z", "modified": "2026-10-01T19:54:13.749174Z", "name": "Indicator Removal: Clear Command History", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1070/003", "external_id": "T1070.003" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.749249Z", "modified": "2026-10-01T19:54:13.749249Z", "name": "Mutual Exclusion (anti_hisana competitor displacement)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1480/002", "external_id": "T1480.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.749323Z", "modified": "2026-10-01T19:54:13.749323Z", "name": "File and Directory Permissions Modification: Linux (chattr +i)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1222/002", "external_id": "T1222.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.749398Z", "modified": "2026-10-01T19:54:13.749398Z", "name": "Unsecured Credentials: Private Keys (SSH key harvest)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/004", "external_id": "T1552.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.749474Z", "modified": "2026-10-01T19:54:13.749474Z", "name": "Process Discovery", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1057", "external_id": "T1057" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.749552Z", "modified": "2026-10-01T19:54:13.749552Z", "name": "Remote System Discovery", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1018", "external_id": "T1018" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.749629Z", "modified": "2026-10-01T19:54:13.749629Z", "name": "File and Directory Discovery (container detection)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1083", "external_id": "T1083" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.749705Z", "modified": "2026-10-01T19:54:13.749705Z", "name": "System Information Discovery", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1082", "external_id": "T1082" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.74978Z", "modified": "2026-10-01T19:54:13.74978Z", "name": "Active Scanning: Vulnerability Scanning (ComfyUI port 8188)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1595/002", "external_id": "T1595.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.749859Z", "modified": "2026-10-01T19:54:13.749859Z", "name": "Remote Services: SSH", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1021/004", "external_id": "T1021.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.749933Z", "modified": "2026-10-01T19:54:13.749933Z", "name": "Application Layer Protocol: Web Protocols", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1071/001", "external_id": "T1071.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.750008Z", "modified": "2026-10-01T19:54:13.750008Z", "name": "Application Layer Protocol: DNS", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1071/004", "external_id": "T1071.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.750082Z", "modified": "2026-10-01T19:54:13.750082Z", "name": "Proxy: Internal Proxy (self-hosted pool proxies)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1090/001", "external_id": "T1090.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.750328Z", "modified": "2026-10-01T19:54:13.750328Z", "name": "Protocol Tunneling (Hysteria v2 QUIC/UDP)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1572", "external_id": "T1572" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.750423Z", "modified": "2026-10-01T19:54:13.750423Z", "name": "Web Service: Bidirectional Communication (dual Telegram bots)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1102/002", "external_id": "T1102.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.750503Z", "modified": "2026-10-01T19:54:13.750503Z", "name": "Resource Hijacking: Compute Hijacking (primary impact)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1496/001", "external_id": "T1496.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.750581Z", "modified": "2026-10-01T19:54:13.750581Z", "name": "Resource Hijacking: Bandwidth Hijacking (Hysteria)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1496/002", "external_id": "T1496.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.750668Z", "modified": "2026-10-01T19:54:13.750668Z", "name": "ghost-cryptojacker-vova75rus-77.110.96.200 infrastructure", "infrastructure_types": [ "command-and-control", "hosting" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c5a90ca-4b8a-5b8a-9896-61bb15c278b8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.751425Z", "modified": "2026-10-01T19:54:13.751425Z", "relationship_type": "indicates", "source_ref": "indicator--25c06a59-d267-5c27-92e7-73c12559f225", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aba3454e-5d6e-5971-867a-e3a0f359089e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.751516Z", "modified": "2026-10-01T19:54:13.751516Z", "relationship_type": "indicates", "source_ref": "indicator--31de5704-b9f1-5a38-af29-a1d3c16f093c", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5b60592f-305b-52cf-b100-757a2e3e4d95", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.751588Z", "modified": "2026-10-01T19:54:13.751588Z", "relationship_type": "indicates", "source_ref": "indicator--4ba05cb5-2063-59d1-8c76-2a9f0848f359", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97f1eb0d-513a-5a37-9d18-1c44d0184bd1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.751652Z", "modified": "2026-10-01T19:54:13.751652Z", "relationship_type": "indicates", "source_ref": "indicator--c15d88ec-6a0d-5f85-bd50-d10c77034938", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b4f88d1d-4abb-584c-9fc4-5ecb9ca899e7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.751714Z", "modified": "2026-10-01T19:54:13.751714Z", "relationship_type": "indicates", "source_ref": "indicator--ed1a4e8c-f8a4-5f4b-9385-23fe8ac3cf03", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7883ef39-2afd-5e05-91e3-0b75c58a8406", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.751778Z", "modified": "2026-10-01T19:54:13.751778Z", "relationship_type": "indicates", "source_ref": "indicator--f45acd05-fede-5fa5-94ac-1cd78a421f2f", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e95b2043-9589-53e8-882f-f7c8fc84ac15", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.751845Z", "modified": "2026-10-01T19:54:13.751845Z", "relationship_type": "indicates", "source_ref": "indicator--e1ed5be4-63e1-5abe-bc83-1c52bc8772dc", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--876f809c-7eab-570a-9647-de9752d12720", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.751908Z", "modified": "2026-10-01T19:54:13.751908Z", "relationship_type": "indicates", "source_ref": "indicator--e2ad61c2-820a-5176-9fe0-7dfe67f6b6e8", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba8855c8-70b4-5df7-9fbb-3081b5aa88b1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.751969Z", "modified": "2026-10-01T19:54:13.751969Z", "relationship_type": "indicates", "source_ref": "indicator--f53751be-9c3c-5867-82e8-1940fb262b2e", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--46a15906-4e2c-5757-8b97-490391b65ea4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752031Z", "modified": "2026-10-01T19:54:13.752031Z", "relationship_type": "indicates", "source_ref": "indicator--b821c58f-d17a-584d-ab7c-9660f78c3c73", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4340f3a-9b4d-506f-a02a-162bb74c9cb6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752091Z", "modified": "2026-10-01T19:54:13.752091Z", "relationship_type": "indicates", "source_ref": "indicator--535731ea-77f8-59b0-b15c-63019ff12479", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8af53c0-1bb8-51f1-b116-934945246a01", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752152Z", "modified": "2026-10-01T19:54:13.752152Z", "relationship_type": "indicates", "source_ref": "indicator--5f5b0e7e-a2e8-55be-b77c-86662db1b49e", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9143cef0-0c95-55fc-977a-edaaf1a5c2ed", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752213Z", "modified": "2026-10-01T19:54:13.752213Z", "relationship_type": "indicates", "source_ref": "indicator--da981557-2e76-5cd5-8b5d-2bd5321fa1cc", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--204398ff-ae7f-574d-bc60-96f0e9e29c33", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752273Z", "modified": "2026-10-01T19:54:13.752273Z", "relationship_type": "indicates", "source_ref": "indicator--2942f30a-88a9-5385-8e95-065c37786c43", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dee9a6d7-a791-5860-b6ae-c1158e01366c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752333Z", "modified": "2026-10-01T19:54:13.752333Z", "relationship_type": "indicates", "source_ref": "indicator--0a40092b-291d-5d74-9d5c-c9b9e23e083e", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--91836ae6-104f-5381-9c2c-72b8e6fea6f9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752394Z", "modified": "2026-10-01T19:54:13.752394Z", "relationship_type": "indicates", "source_ref": "indicator--3924a79f-39ad-51dd-b8e2-43ac4f8ee54c", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--02b63a81-72df-5361-91aa-b6910223bc79", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752455Z", "modified": "2026-10-01T19:54:13.752455Z", "relationship_type": "indicates", "source_ref": "indicator--63081f19-a1d6-5053-a4b2-c426db9e40fb", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e796f268-5aef-57cd-961b-4b7c1e73af14", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752516Z", "modified": "2026-10-01T19:54:13.752516Z", "relationship_type": "indicates", "source_ref": "indicator--a75c5beb-93b4-504f-b0cb-ba40949b8932", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eb878978-5157-588f-b2c6-0e5f5dcb2117", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752576Z", "modified": "2026-10-01T19:54:13.752576Z", "relationship_type": "indicates", "source_ref": "indicator--e24d7444-2d05-5cd9-b339-d3c1e963dcef", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3355dced-fa28-5e46-b82e-242a8a9e5bd6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752635Z", "modified": "2026-10-01T19:54:13.752635Z", "relationship_type": "indicates", "source_ref": "indicator--945c4ea1-5c16-55c9-a98c-dee7d2dfb993", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0b61059c-59cc-5256-ad41-9d667f53be56", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752695Z", "modified": "2026-10-01T19:54:13.752695Z", "relationship_type": "indicates", "source_ref": "indicator--861ba2a9-51e3-5eaa-b24c-6466bdc41ba9", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7579b8be-edea-5930-8435-a273c1735dd4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752755Z", "modified": "2026-10-01T19:54:13.752755Z", "relationship_type": "indicates", "source_ref": "indicator--44cedbec-2e5d-5a2b-9083-7412f44334e6", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5430fe18-46ee-5dba-93fb-f1fac29177e7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752818Z", "modified": "2026-10-01T19:54:13.752818Z", "relationship_type": "indicates", "source_ref": "indicator--fd9b3cb2-de6e-5d1c-aec2-f8bd892dda95", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bc1bc7e1-91bb-5e96-88f2-4ed6833d8d0d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.752878Z", "modified": "2026-10-01T19:54:13.752878Z", "relationship_type": "indicates", "source_ref": "indicator--5e0a3104-cc85-5091-9437-f5795d2171b1", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--815bcf6b-9e05-51c4-b5a6-137f4ed5a9b7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.75294Z", "modified": "2026-10-01T19:54:13.75294Z", "relationship_type": "indicates", "source_ref": "indicator--3465630b-25cc-50fa-a9a4-bb1e2b64aa0a", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b70f04c-a07e-5a22-99c8-b19b620ddf43", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753Z", "modified": "2026-10-01T19:54:13.753Z", "relationship_type": "indicates", "source_ref": "indicator--3b717480-1786-5beb-ab11-5c180da3de1d", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--059feb7c-f244-5ff4-8f4b-0138d750fd2c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753059Z", "modified": "2026-10-01T19:54:13.753059Z", "relationship_type": "indicates", "source_ref": "indicator--f1cd66d6-553a-5791-a654-204dd2e3a85b", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d85d3fb8-3217-59c1-87a3-cbfdb47d21e6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753119Z", "modified": "2026-10-01T19:54:13.753119Z", "relationship_type": "indicates", "source_ref": "indicator--876ea16b-5804-5690-85ee-684bad2f221e", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1c0a2806-3d28-59c4-abf8-e88e4edbb660", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753178Z", "modified": "2026-10-01T19:54:13.753178Z", "relationship_type": "indicates", "source_ref": "indicator--616d755d-07d1-53b4-9af7-ceff7dff37e7", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5bc7cf4-e58b-55e1-9185-8b5a03740f4f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753238Z", "modified": "2026-10-01T19:54:13.753238Z", "relationship_type": "indicates", "source_ref": "indicator--6e1517d0-ebed-56bf-ab6a-dbb1dc8a8021", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e12f0c8-559f-515b-a226-32b0466e3c34", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753298Z", "modified": "2026-10-01T19:54:13.753298Z", "relationship_type": "indicates", "source_ref": "indicator--3dfaa4d5-4638-5546-9b78-e5e5a0f551b4", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--acab6f37-673c-5d39-8c85-a8dd33b64e0a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753357Z", "modified": "2026-10-01T19:54:13.753357Z", "relationship_type": "indicates", "source_ref": "indicator--be07cd65-95b6-5ca4-8279-d70ba1dd7dad", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64528fca-7739-5478-975c-2e3b1200b707", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753416Z", "modified": "2026-10-01T19:54:13.753416Z", "relationship_type": "indicates", "source_ref": "indicator--6d1bc44e-fe7e-5313-9aae-cffcd26c0997", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc867033-7908-527e-ac05-48ba5107a2fc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753475Z", "modified": "2026-10-01T19:54:13.753475Z", "relationship_type": "indicates", "source_ref": "indicator--0b2abd83-408d-5507-b85e-bbffaaa202e7", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc8b302e-2f23-5196-800e-572a0ca40310", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753535Z", "modified": "2026-10-01T19:54:13.753535Z", "relationship_type": "indicates", "source_ref": "indicator--346e9bdf-0129-5bc8-9ecc-27f99e556375", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5cc2e8f8-ae53-5861-8351-6f0a18260994", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753595Z", "modified": "2026-10-01T19:54:13.753595Z", "relationship_type": "indicates", "source_ref": "indicator--cca2fb59-54ea-5f41-b885-b4da230895bd", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f7068553-e521-519a-9fed-24cc3b6d2d98", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753654Z", "modified": "2026-10-01T19:54:13.753654Z", "relationship_type": "indicates", "source_ref": "indicator--20314fe5-2964-5a0b-9286-1ed16f20a4e1", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--83a7cfba-4c6f-5b37-9221-07ce8dbef3fd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T04:24:15.804495Z", "modified": "2026-10-11T04:24:15.804495Z", "relationship_type": "indicates", "source_ref": "indicator--4182bc44-6b37-5f10-bbd3-b827e15835a5", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e3482394-0531-5cf8-b6ba-19b035676820", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753773Z", "modified": "2026-10-01T19:54:13.753773Z", "relationship_type": "indicates", "source_ref": "indicator--f4470d02-406f-5e86-8aad-0afb255bc3ad", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cd1b0ee5-e67d-5204-8369-563ba15157fb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753837Z", "modified": "2026-10-01T19:54:13.753837Z", "relationship_type": "indicates", "source_ref": "indicator--4d021958-4d7d-5ffe-8031-6ebb99e5279e", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f75c494e-c1fb-5774-aa02-0465d2d94dab", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753897Z", "modified": "2026-10-01T19:54:13.753897Z", "relationship_type": "indicates", "source_ref": "indicator--07bfb3d0-8f9f-5216-8a80-1a52264e3174", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4b43eb00-7033-5719-be45-097407cb420e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.753956Z", "modified": "2026-10-01T19:54:13.753956Z", "relationship_type": "indicates", "source_ref": "indicator--dce86bf3-3e8c-506b-ae70-83f378e532d6", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1c8538d-49df-5647-8463-fdea84ad28bb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.754015Z", "modified": "2026-10-01T19:54:13.754015Z", "relationship_type": "indicates", "source_ref": "indicator--a484fc2f-55e0-5e06-9140-470c6da5d93f", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1682d665-6069-5278-86cd-fd33ec29f33f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.754074Z", "modified": "2026-10-01T19:54:13.754074Z", "relationship_type": "indicates", "source_ref": "indicator--a1f7f480-7372-5967-950f-f5d9b8c4728c", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--312c3b2b-cbdf-5e5a-9ab0-6ec78333c340", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T14:08:24.284353Z", "modified": "2026-10-11T14:08:24.284353Z", "relationship_type": "indicates", "source_ref": "indicator--0f66f4ac-ff48-52cf-a0a0-f877dc42b4a4", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--697c58a5-b5f5-5b89-b658-73cb6d00e490", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.754311Z", "modified": "2026-10-01T19:54:13.754311Z", "relationship_type": "indicates", "source_ref": "indicator--9fae4a61-8e3a-5de2-9212-f438f5be456f", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--633c1fe1-bbad-55b4-8d3f-5442b5d4fbdb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.754369Z", "modified": "2026-10-01T19:54:13.754369Z", "relationship_type": "indicates", "source_ref": "indicator--5956f922-e13f-5a7e-962b-b6d0f2d499b8", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e70bae7-6700-5e7a-8ef1-9b62953cc0bb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T04:24:15.805926Z", "modified": "2026-10-11T04:24:15.805926Z", "relationship_type": "indicates", "source_ref": "indicator--56a586e2-920f-5244-878c-6685f27aebd5", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a7e58667-5b19-58a5-808a-3272ab9aa4a8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T04:24:15.806028Z", "modified": "2026-10-11T04:24:15.806028Z", "relationship_type": "indicates", "source_ref": "indicator--145d5f2f-e312-59ac-85eb-7144c65069e6", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b1136b0e-f692-501c-8ee8-8655ee19d8e5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T04:24:15.806129Z", "modified": "2026-10-11T04:24:15.806129Z", "relationship_type": "indicates", "source_ref": "indicator--390b3d5a-0fee-5f7b-9a4e-87e083b0e3ab", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--323a8fed-8301-541b-8e57-cca65dcbe680", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T04:24:15.8054Z", "modified": "2026-10-11T04:24:15.8054Z", "relationship_type": "indicates", "source_ref": "indicator--483c47cf-2e33-5a9b-b8cf-3959e100d49e", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e3d060a-6dd7-5dbc-a933-be9cd44d1bd3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T07:05:19.546493Z", "modified": "2026-10-11T07:05:19.546493Z", "relationship_type": "indicates", "source_ref": "indicator--8489f391-5119-54e4-b79a-1c4fad695970", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--41040516-e978-5967-a5b6-0d0d930b4ea4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.754603Z", "modified": "2026-10-01T19:54:13.754603Z", "relationship_type": "indicates", "source_ref": "indicator--1bfe229f-9656-57a6-bf96-7c53c78d776d", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--000e6520-a77b-5fdf-9fc0-38889e70d83b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.754664Z", "modified": "2026-10-01T19:54:13.754664Z", "relationship_type": "indicates", "source_ref": "indicator--4004ac82-6f13-5504-8b3f-0805cc63a58d", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ebf236f3-9cf3-5757-afb6-c4ab7652aa54", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T14:08:24.285187Z", "modified": "2026-10-11T14:08:24.285187Z", "relationship_type": "indicates", "source_ref": "indicator--30384888-d981-5a3b-a864-0bef5c3c22ad", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3203b5ce-7f1f-5acc-8989-31dbc3f069c5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-11T04:24:15.806514Z", "modified": "2026-10-11T04:24:15.806514Z", "relationship_type": "indicates", "source_ref": "indicator--2beb4dc7-06d9-5c7f-8570-934e77fc5a4a", "target_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9d19763e-e274-5fd1-9ec2-cd112b87dc26", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.754845Z", "modified": "2026-10-01T19:54:13.754845Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--63edcfdb-1ec3-5016-887d-6e99c7e7a4a9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.754905Z", "modified": "2026-10-01T19:54:13.754905Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7a70f6cd-3665-5399-8fc6-cea0ac06bbfa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.754964Z", "modified": "2026-10-01T19:54:13.754964Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0299d816-db5f-53ff-b1b0-7731527e45d9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755023Z", "modified": "2026-10-01T19:54:13.755023Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4d44ed1b-d183-5909-95df-b243dcd63aed", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755081Z", "modified": "2026-10-01T19:54:13.755081Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4c1fe9e2-9858-5b6a-805d-b4b92f866c03", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.75514Z", "modified": "2026-10-01T19:54:13.75514Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--529949b0-a0da-571c-af16-3d73bbe177c1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755199Z", "modified": "2026-10-01T19:54:13.755199Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2127a3c-ff61-5871-a77d-bbdce2572032", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755258Z", "modified": "2026-10-01T19:54:13.755258Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5283fdb-86c1-5b42-997f-21bd2e04ec16", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755317Z", "modified": "2026-10-01T19:54:13.755317Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6e92812-48d8-50e9-97f1-039296ea7674", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755376Z", "modified": "2026-10-01T19:54:13.755376Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa04269b-6fb1-5110-83f1-e88ff2ad4a28", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755434Z", "modified": "2026-10-01T19:54:13.755434Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--45bc8406-c1ec-5a17-8255-e7f3c28069e9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755493Z", "modified": "2026-10-01T19:54:13.755493Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e6706ac8-efb8-552c-8dc2-4f4620e646c2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.75555Z", "modified": "2026-10-01T19:54:13.75555Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ed0c2b3f-e429-5dd5-be16-861bdd79446d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755608Z", "modified": "2026-10-01T19:54:13.755608Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--afd7b728-6702-58c1-8cc7-3b12d4d299c0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755667Z", "modified": "2026-10-01T19:54:13.755667Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--36dfca65-6069-591b-87ef-ada639ef693a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755726Z", "modified": "2026-10-01T19:54:13.755726Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d3d12449-dbd1-5000-916a-70497eb3692a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755784Z", "modified": "2026-10-01T19:54:13.755784Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e072a51-db3a-5c1c-9239-5ed7e000459c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755846Z", "modified": "2026-10-01T19:54:13.755846Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f0d1853d-fbb2-59be-9b2b-5f513d17d4e0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755905Z", "modified": "2026-10-01T19:54:13.755905Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97dc3e58-2f5a-5559-9cea-52859523cafa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.755964Z", "modified": "2026-10-01T19:54:13.755964Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--280451ba-0e4f-5f44-8056-9be4b493e6e5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756022Z", "modified": "2026-10-01T19:54:13.756022Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--efb67884-6e42-577a-af5b-28556530e2fe", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756082Z", "modified": "2026-10-01T19:54:13.756082Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--10c21099-bb92-516f-9080-1e592450e42e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.75614Z", "modified": "2026-10-01T19:54:13.75614Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ed9da21b-30ed-540f-8662-89657e2ed624", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756199Z", "modified": "2026-10-01T19:54:13.756199Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--736787e3-4933-551f-bc78-3ce3244c63e0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756257Z", "modified": "2026-10-01T19:54:13.756257Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8ab6a923-d674-5b7e-8429-cb1b81c7e361", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756316Z", "modified": "2026-10-01T19:54:13.756316Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d789d28f-6faa-53b3-b86a-2ced915338d3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756375Z", "modified": "2026-10-01T19:54:13.756375Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c9a91137-b73e-5e89-bce0-6e9fc79233a7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756433Z", "modified": "2026-10-01T19:54:13.756433Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a4f72c2-2c8e-570a-8f4b-a472c9879757", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756491Z", "modified": "2026-10-01T19:54:13.756491Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1766f277-a8f2-5030-8c87-fdcf28a9dd73", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.75655Z", "modified": "2026-10-01T19:54:13.75655Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31d0a778-8634-5af4-b7e9-ef285e7f59dc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756608Z", "modified": "2026-10-01T19:54:13.756608Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3746e35d-3364-5ec4-af1b-2561708b2387", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756666Z", "modified": "2026-10-01T19:54:13.756666Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--acf47b5b-c8de-5b3c-bac0-0fb9952e2a50", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756725Z", "modified": "2026-10-01T19:54:13.756725Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de1b37b0-308f-56d0-964d-9b6f6a83f240", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756783Z", "modified": "2026-10-01T19:54:13.756783Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f00b828-0a0c-5a17-bddb-ec9f16d1d78d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756845Z", "modified": "2026-10-01T19:54:13.756845Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e47d003-1772-558b-b0a8-1fadcdd32cf3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756903Z", "modified": "2026-10-01T19:54:13.756903Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64a25e6e-413c-5315-9cf1-72f1745537b6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.756961Z", "modified": "2026-10-01T19:54:13.756961Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6880da3b-0a57-5ab3-9337-ca1da13b2c61", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757021Z", "modified": "2026-10-01T19:54:13.757021Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32d5703f-e5aa-503b-a8d3-623149aa7a04", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757081Z", "modified": "2026-10-01T19:54:13.757081Z", "relationship_type": "uses", "source_ref": "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--945341e6-cb7f-5e01-b0be-a58cc4194a20", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.75714Z", "modified": "2026-10-01T19:54:13.75714Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5568200-511e-59df-bbc9-e013b63b7d2b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757199Z", "modified": "2026-10-01T19:54:13.757199Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--21ec29cc-5dd3-5274-9118-9a992135cdd5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757258Z", "modified": "2026-10-01T19:54:13.757258Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2e30075-5e3f-5bfa-85d6-80c10102886b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757317Z", "modified": "2026-10-01T19:54:13.757317Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53c0cc5c-fa43-557e-af57-500f4a3852b5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757375Z", "modified": "2026-10-01T19:54:13.757375Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--488c3369-dcd5-5c0d-9d93-fe4e71b632f2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757434Z", "modified": "2026-10-01T19:54:13.757434Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1354826e-1e88-5a6c-bef2-4cff55fe85ad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757493Z", "modified": "2026-10-01T19:54:13.757493Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ce8b365-c7ed-5d42-bc8a-8d9eab1deaec", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757551Z", "modified": "2026-10-01T19:54:13.757551Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2731416-b563-5970-af3d-9638c78a90cf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757609Z", "modified": "2026-10-01T19:54:13.757609Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5b2bc95b-1bbb-5846-a917-5913bd166b0d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757667Z", "modified": "2026-10-01T19:54:13.757667Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bc768be6-5d8a-5157-8394-713ef6561de4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757725Z", "modified": "2026-10-01T19:54:13.757725Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e92d14e-7c4e-5d1a-985e-75963d832e13", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757784Z", "modified": "2026-10-01T19:54:13.757784Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09e75b47-4ff9-5d1d-a3ec-299f2acc545b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757847Z", "modified": "2026-10-01T19:54:13.757847Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--28da6d8e-87f7-530f-9ee9-5c114234f63c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757906Z", "modified": "2026-10-01T19:54:13.757906Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4accc18-61dd-52a0-b24f-5af39d473ed2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.757966Z", "modified": "2026-10-01T19:54:13.757966Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--afab779f-05d3-5cec-b0b3-655e5ec38ced", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758025Z", "modified": "2026-10-01T19:54:13.758025Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b632b1c-03ea-57d8-b824-29b65b0b2f33", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758084Z", "modified": "2026-10-01T19:54:13.758084Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--69a483b5-27e1-54f4-a91c-c34ba1b7bdda", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758142Z", "modified": "2026-10-01T19:54:13.758142Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b3fd0de2-8049-5395-9b7f-65a86619a58e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758201Z", "modified": "2026-10-01T19:54:13.758201Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aabaf056-e44a-5f4f-88cf-fa1e9a74876e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758259Z", "modified": "2026-10-01T19:54:13.758259Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c31b64ec-db94-55a6-ad3f-dc5b4f0d6223", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758318Z", "modified": "2026-10-01T19:54:13.758318Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b3e4e6a6-3213-543e-8b33-9a2f8ebf53ec", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758376Z", "modified": "2026-10-01T19:54:13.758376Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1136cfc4-2e25-5fec-a51d-b2f35eeb629d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758435Z", "modified": "2026-10-01T19:54:13.758435Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d6eecff0-1e89-546c-a4d5-6f38b219d848", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758495Z", "modified": "2026-10-01T19:54:13.758495Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--52ba1f13-fc15-588d-b1f3-d53d9afca145", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758553Z", "modified": "2026-10-01T19:54:13.758553Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--597ecb40-640f-5ca3-b78d-eed35209c39f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758611Z", "modified": "2026-10-01T19:54:13.758611Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a134205f-991b-5153-b882-c122a2393da6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.75867Z", "modified": "2026-10-01T19:54:13.75867Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4646731b-2faa-575a-9859-d68a4ce66226", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758728Z", "modified": "2026-10-01T19:54:13.758728Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c0e86ed9-c51b-5a85-b2d4-793fdba23841", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758788Z", "modified": "2026-10-01T19:54:13.758788Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--10ab433b-0fee-51ea-891e-b82ada3396c4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.75885Z", "modified": "2026-10-01T19:54:13.75885Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9125ce98-7d59-5178-b344-38297313cf21", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758909Z", "modified": "2026-10-01T19:54:13.758909Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6cbcb64e-5781-5b23-a626-57cec17df6e2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.758968Z", "modified": "2026-10-01T19:54:13.758968Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bf2fd3f4-9fb1-5543-9c2a-acbbbb1bb8b2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759027Z", "modified": "2026-10-01T19:54:13.759027Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f100902f-0f06-5c65-9332-8f9cb1845af5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759086Z", "modified": "2026-10-01T19:54:13.759086Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b39beb79-a4c1-5b27-866f-bd746c793bb7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759145Z", "modified": "2026-10-01T19:54:13.759145Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--995118f4-3904-5df6-ad2d-937a972e1dfb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759204Z", "modified": "2026-10-01T19:54:13.759204Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b528c94f-53e4-5aa1-b617-c8339783ad44", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759262Z", "modified": "2026-10-01T19:54:13.759262Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b11628c0-2873-539e-84ac-23a499741a2e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.75932Z", "modified": "2026-10-01T19:54:13.75932Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--58c6a850-6242-5fa0-bae9-a44e21b084b1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759379Z", "modified": "2026-10-01T19:54:13.759379Z", "relationship_type": "uses", "source_ref": "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92cd53da-652b-5d6c-9574-1eb966c8d870", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759438Z", "modified": "2026-10-01T19:54:13.759438Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ba7c792-6f76-5d4c-af9d-4e41659308f5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759496Z", "modified": "2026-10-01T19:54:13.759496Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--65ca5aa3-aefc-54d2-ae68-e1d910512d13", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759554Z", "modified": "2026-10-01T19:54:13.759554Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3290dd08-510b-5eb6-80f6-485e2e5673e8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759613Z", "modified": "2026-10-01T19:54:13.759613Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2db1a2f9-cc96-5228-8759-57d5b99a0995", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759671Z", "modified": "2026-10-01T19:54:13.759671Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--daedccec-40ee-51ee-bbde-7ca9394984fe", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759729Z", "modified": "2026-10-01T19:54:13.759729Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dee84149-597f-5795-b29a-61904a67b644", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759787Z", "modified": "2026-10-01T19:54:13.759787Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--14e2bd9b-510c-54ca-9106-91b7145aa211", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759849Z", "modified": "2026-10-01T19:54:13.759849Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6dfde421-25fd-5ae7-bf31-e447b7d9ddf8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759908Z", "modified": "2026-10-01T19:54:13.759908Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47def7c6-6137-5dca-a589-074f9c01634c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.759966Z", "modified": "2026-10-01T19:54:13.759966Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b273c127-545a-50fe-a217-720d39f1d7d5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760025Z", "modified": "2026-10-01T19:54:13.760025Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b624783-26ff-56f4-b716-a74619197d5e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760083Z", "modified": "2026-10-01T19:54:13.760083Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ab9ced35-f57c-5e1b-be70-0341cc62b48d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760142Z", "modified": "2026-10-01T19:54:13.760142Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cbcc1a8f-a5a7-5232-938c-4d447e41175f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760201Z", "modified": "2026-10-01T19:54:13.760201Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d5af89f1-338f-595e-8ff0-3f68bc71a112", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.76026Z", "modified": "2026-10-01T19:54:13.76026Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b60e550c-8a38-567a-97cb-209b709f112d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760318Z", "modified": "2026-10-01T19:54:13.760318Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--00f51a10-ba66-5e82-84e8-d65d6888684b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760377Z", "modified": "2026-10-01T19:54:13.760377Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c47d00a8-2cde-5f10-8414-fcad8ebc9d9a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760436Z", "modified": "2026-10-01T19:54:13.760436Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d03f823-b60c-53d8-93c4-3108641a6503", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760495Z", "modified": "2026-10-01T19:54:13.760495Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18478ca6-7784-51e2-9896-04eae007c0a7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760553Z", "modified": "2026-10-01T19:54:13.760553Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2782a63e-ced1-50c2-bba9-7e6acd432898", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760612Z", "modified": "2026-10-01T19:54:13.760612Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3968a3c1-4df5-5ba7-b5b8-9bbc046d9aa6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760669Z", "modified": "2026-10-01T19:54:13.760669Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--955c7496-ea7a-5958-a665-d6a0552d40b9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760728Z", "modified": "2026-10-01T19:54:13.760728Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fcaa704c-767c-5732-b49e-dd0e97b702a8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760787Z", "modified": "2026-10-01T19:54:13.760787Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f0d6ce95-46db-5bc7-bba3-c555a4e38d45", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760879Z", "modified": "2026-10-01T19:54:13.760879Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9104a4b5-fcd6-5c2b-a98e-3d4f0b66b98f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760938Z", "modified": "2026-10-01T19:54:13.760938Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6484691-5ddb-59ee-ac44-a8f72cdd9730", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.760997Z", "modified": "2026-10-01T19:54:13.760997Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3f223617-ba30-5905-8a19-b3589eee7241", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761056Z", "modified": "2026-10-01T19:54:13.761056Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92ebe8f7-b432-5a95-8579-5f701a72de3e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761114Z", "modified": "2026-10-01T19:54:13.761114Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dec4254c-9f95-54f7-b607-0a74e5442d86", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761189Z", "modified": "2026-10-01T19:54:13.761189Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4141473-2e92-5a95-84a6-6215a816d1fb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761292Z", "modified": "2026-10-01T19:54:13.761292Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5965372-a1bc-51e7-833d-200dfdbe1b1b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761351Z", "modified": "2026-10-01T19:54:13.761351Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--593f6067-f5cc-515d-8f61-7fa7613b2a9d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.76141Z", "modified": "2026-10-01T19:54:13.76141Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fcec838d-4997-5a7f-8c29-81d93c6e24a7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761468Z", "modified": "2026-10-01T19:54:13.761468Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b668a04e-14be-5119-abe8-36e4a00ce53a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761527Z", "modified": "2026-10-01T19:54:13.761527Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3a185c4-2ba5-561c-b34a-95b2f83dffbd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761586Z", "modified": "2026-10-01T19:54:13.761586Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--90182c46-29c5-5221-9dc5-2f7a75c2b524", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761644Z", "modified": "2026-10-01T19:54:13.761644Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18dda5fc-4976-5839-8dd9-faf58eaf267c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761702Z", "modified": "2026-10-01T19:54:13.761702Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc216689-7479-55ad-a7ea-5c5d4d3497e1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761761Z", "modified": "2026-10-01T19:54:13.761761Z", "relationship_type": "uses", "source_ref": "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4c564ba8-9f6e-51c8-bab2-ebc9c79b4c13", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761824Z", "modified": "2026-10-01T19:54:13.761824Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dcc3f39b-c306-5aed-9daf-ef9337b2aee8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761884Z", "modified": "2026-10-01T19:54:13.761884Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2ea35854-2ba7-5133-a6c4-011288eef98c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.761943Z", "modified": "2026-10-01T19:54:13.761943Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ea6dac8a-c584-581b-bde8-24515a2e94fe", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762001Z", "modified": "2026-10-01T19:54:13.762001Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb26e67e-ff1a-566f-9462-662814f7112d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762059Z", "modified": "2026-10-01T19:54:13.762059Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--85b67d72-aa2f-524d-b3a6-d4140be62aaf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762117Z", "modified": "2026-10-01T19:54:13.762117Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f35d5d18-7805-5ad4-b39c-b4583b64dab5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762176Z", "modified": "2026-10-01T19:54:13.762176Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e29b0c2-4b6a-5f1d-a903-5cf696ad61b9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762234Z", "modified": "2026-10-01T19:54:13.762234Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d35492f4-8002-5069-80b5-2bfa9cb3a200", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762292Z", "modified": "2026-10-01T19:54:13.762292Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d6e86c7-0a0c-51c4-bff6-4daaaabdeb1c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.76235Z", "modified": "2026-10-01T19:54:13.76235Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--60051a49-3666-595e-9e46-6c9dbd2f9e8e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762408Z", "modified": "2026-10-01T19:54:13.762408Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09cf84fe-41ba-5286-8088-b1a1370ec54d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762467Z", "modified": "2026-10-01T19:54:13.762467Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7aec2a05-0518-5eb7-b15e-8497a54d8396", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762529Z", "modified": "2026-10-01T19:54:13.762529Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fd689333-1f23-5818-8f8a-db65767d8419", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762589Z", "modified": "2026-10-01T19:54:13.762589Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ff65a628-433f-5484-b6e7-7218220bd2b2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762647Z", "modified": "2026-10-01T19:54:13.762647Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e1f12dbe-ab37-519f-a413-01a615257043", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762706Z", "modified": "2026-10-01T19:54:13.762706Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1d2b2f0e-d413-5605-9324-7c6dadc278fd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762764Z", "modified": "2026-10-01T19:54:13.762764Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bcc876d5-7f15-553e-bdb3-c7a655433601", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762826Z", "modified": "2026-10-01T19:54:13.762826Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa8b9b74-5627-50f9-8178-2f5f75670c16", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762885Z", "modified": "2026-10-01T19:54:13.762885Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--202b82c5-416c-5052-b5f1-35b6a53ed6cf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.762943Z", "modified": "2026-10-01T19:54:13.762943Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2fd30e22-a858-52a5-af2e-8ad8a7355b45", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763008Z", "modified": "2026-10-01T19:54:13.763008Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f1afafd-a6f4-5304-afa4-43c9985cfd96", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763066Z", "modified": "2026-10-01T19:54:13.763066Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b1afb0a6-5b8e-5486-b272-74a14a7d2fd8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763125Z", "modified": "2026-10-01T19:54:13.763125Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d4a2870-ea80-5893-8b67-d888804d4ddd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763184Z", "modified": "2026-10-01T19:54:13.763184Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48201109-92ef-508b-b6c4-5a210e370752", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763242Z", "modified": "2026-10-01T19:54:13.763242Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7bd6f2e9-ec2a-5027-9bf3-b527b241bfdb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.7633Z", "modified": "2026-10-01T19:54:13.7633Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49f84458-fa9e-5a5e-a9b7-e35439401dce", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.76336Z", "modified": "2026-10-01T19:54:13.76336Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--650dcd78-3a52-5b00-af6b-6b8cf2b40764", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763418Z", "modified": "2026-10-01T19:54:13.763418Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa202e8c-b74f-5c69-be8a-cb215b119690", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763477Z", "modified": "2026-10-01T19:54:13.763477Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--323de175-4217-57e1-84f3-346c8f5239a9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763536Z", "modified": "2026-10-01T19:54:13.763536Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3270b226-91d1-5e27-bff8-e80d7035ae2f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763594Z", "modified": "2026-10-01T19:54:13.763594Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa06207e-b08e-5e57-a32d-5089484a719c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763655Z", "modified": "2026-10-01T19:54:13.763655Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--07c23b8a-9033-509d-bf57-49238c773bb1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763714Z", "modified": "2026-10-01T19:54:13.763714Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c366da2-7457-5c03-882c-6adb7ac78449", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763772Z", "modified": "2026-10-01T19:54:13.763772Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--581fc19f-c40d-5a9d-9518-28b3be589629", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763833Z", "modified": "2026-10-01T19:54:13.763833Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1c2e5f3b-5529-583d-a5d8-100169eb91bc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763892Z", "modified": "2026-10-01T19:54:13.763892Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9106b0e-4dbe-5c43-b320-f4c577dd37f0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.763954Z", "modified": "2026-10-01T19:54:13.763954Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e3cde425-aaaf-5108-8394-3ad8cbf8b70b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764013Z", "modified": "2026-10-01T19:54:13.764013Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c464c22-3a7e-5b5e-a878-7fc4231e1145", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764072Z", "modified": "2026-10-01T19:54:13.764072Z", "relationship_type": "uses", "source_ref": "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dcb6c876-8ed5-55f0-9e9f-a9b18f45487a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.76413Z", "modified": "2026-10-01T19:54:13.76413Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31b60644-aa5a-5f0f-8cf7-1e2606f65997", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764188Z", "modified": "2026-10-01T19:54:13.764188Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--973e6356-63c8-5160-ba37-d213759504e6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764249Z", "modified": "2026-10-01T19:54:13.764249Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c1d8b008-24c1-533f-9d45-1000eaf28d3e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764308Z", "modified": "2026-10-01T19:54:13.764308Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8f3f927-7621-50d1-8d0f-0bc3c13f7d57", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764366Z", "modified": "2026-10-01T19:54:13.764366Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6fc46d2c-229e-5444-a91e-261e096a7bbd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764427Z", "modified": "2026-10-01T19:54:13.764427Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4cfe29c7-15a4-5bbd-88b0-29aca5927482", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764485Z", "modified": "2026-10-01T19:54:13.764485Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--02ad8d51-0e5e-5ce4-a858-97cd998f0851", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764545Z", "modified": "2026-10-01T19:54:13.764545Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e3208e3-8a8a-572a-9ca5-7e74612bb930", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764605Z", "modified": "2026-10-01T19:54:13.764605Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50cca3df-1e06-5c4d-a0e4-228ff1bfaa40", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764665Z", "modified": "2026-10-01T19:54:13.764665Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f0aa55a4-f6fc-54e8-aa60-5c675c6db017", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764724Z", "modified": "2026-10-01T19:54:13.764724Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--74b4ebee-11cb-5e09-afd1-be9dc8cf82dd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764783Z", "modified": "2026-10-01T19:54:13.764783Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3e03b4a-0174-53ef-b7cf-1a5054962a2e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764847Z", "modified": "2026-10-01T19:54:13.764847Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4dcc14d-1ad5-5a9d-b561-dc87b9ef47db", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764908Z", "modified": "2026-10-01T19:54:13.764908Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a61db77-4876-593d-9461-344550312562", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.764967Z", "modified": "2026-10-01T19:54:13.764967Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9a010298-3842-5f8f-89ab-acb7798a849a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.765025Z", "modified": "2026-10-01T19:54:13.765025Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ce6a520-fbc3-5451-b5cf-83decb9026ba", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.765084Z", "modified": "2026-10-01T19:54:13.765084Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9599bb0-69fd-55e6-8918-d911bb92ff26", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.765142Z", "modified": "2026-10-01T19:54:13.765142Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8942c9eb-cd8f-5c17-8851-87dc4eda596d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.765202Z", "modified": "2026-10-01T19:54:13.765202Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47aad43e-f04c-53a7-af65-e2d913f0ac80", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.76526Z", "modified": "2026-10-01T19:54:13.76526Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec634be1-a820-56f5-af60-12294ea20a07", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.765319Z", "modified": "2026-10-01T19:54:13.765319Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cabde7ae-69ff-5017-8429-ef58f602c0a7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.765379Z", "modified": "2026-10-01T19:54:13.765379Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--168d6276-f812-5e3b-b247-e6b6633ba558", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.76544Z", "modified": "2026-10-01T19:54:13.76544Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--576faf64-87de-5009-90bd-c27917f68ca5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.765498Z", "modified": "2026-10-01T19:54:13.765498Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--df781d69-5e52-5073-bfe3-6e22a7de11ad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.765558Z", "modified": "2026-10-01T19:54:13.765558Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c860ffac-3b5d-5f99-a3fe-fa720233a194", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.765617Z", "modified": "2026-10-01T19:54:13.765617Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--936c5da7-6775-56d1-a44b-1a0eee5bb50f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.765675Z", "modified": "2026-10-01T19:54:13.765675Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dadf5693-1de6-52ec-a793-16f259fad226", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.765734Z", "modified": "2026-10-01T19:54:13.765734Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--087548dd-96b9-50a1-8927-4de4c59cefc2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.76587Z", "modified": "2026-10-01T19:54:13.76587Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8af5c79a-77aa-58be-8e25-05d8d41ef338", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.765931Z", "modified": "2026-10-01T19:54:13.765931Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32b4522f-2c3d-590e-bdf8-61eabd9bf455", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.765993Z", "modified": "2026-10-01T19:54:13.765993Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6fe2373c-6b5d-5493-b322-a7dd9fd57e12", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766053Z", "modified": "2026-10-01T19:54:13.766053Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--949fb67f-9a55-59d6-89f6-abef96f4f4e2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766114Z", "modified": "2026-10-01T19:54:13.766114Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3cbddd4f-52bc-521c-838c-ca3fe189f0e9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766173Z", "modified": "2026-10-01T19:54:13.766173Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--78e69769-8da6-557f-bb7f-613b544ab61d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766231Z", "modified": "2026-10-01T19:54:13.766231Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8fd29e5-2042-5b2a-b518-25448f11f824", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.76629Z", "modified": "2026-10-01T19:54:13.76629Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79871aa2-0e50-53a5-bcc8-bc9bc8bfe56b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.76635Z", "modified": "2026-10-01T19:54:13.76635Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--90fb3596-99ad-5cee-aa84-c60dbc16536b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766409Z", "modified": "2026-10-01T19:54:13.766409Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bc19bcfd-f5d9-57e4-b6b8-679b2274b652", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766467Z", "modified": "2026-10-01T19:54:13.766467Z", "relationship_type": "uses", "source_ref": "malware--746b9882-c07c-51b2-8212-17f6322f6694", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2357d84-6516-5c0f-8e45-54104fc2e376", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766526Z", "modified": "2026-10-01T19:54:13.766526Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--144e4246-b540-5135-ad3a-ff9e9d0131a3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766585Z", "modified": "2026-10-01T19:54:13.766585Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5322ce99-54f8-5d37-b244-1170f195514e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766643Z", "modified": "2026-10-01T19:54:13.766643Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee1ebf04-c6ff-5afd-986f-bc3558c94872", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766704Z", "modified": "2026-10-01T19:54:13.766704Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d68cdfef-4b22-547a-87d1-a38588e71989", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766762Z", "modified": "2026-10-01T19:54:13.766762Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f2fc374b-1938-5993-b125-2d6297ff3661", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766826Z", "modified": "2026-10-01T19:54:13.766826Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec32b477-df4b-59b0-a6b7-986fcd45541a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766886Z", "modified": "2026-10-01T19:54:13.766886Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--be086320-f131-5cfe-9819-ca0c82c4e1ba", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.766944Z", "modified": "2026-10-01T19:54:13.766944Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--82e97b90-8357-5088-b40b-32356165c20d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767002Z", "modified": "2026-10-01T19:54:13.767002Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5edcf862-325a-5261-aa30-2b90f486d4d8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767061Z", "modified": "2026-10-01T19:54:13.767061Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--604bdd59-d5ab-5fa9-b433-fffc48d634e3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767119Z", "modified": "2026-10-01T19:54:13.767119Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6624ce40-e819-5b5e-b416-98f067ef0166", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.76718Z", "modified": "2026-10-01T19:54:13.76718Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e0fec190-0697-502d-8f67-95d0827184d2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767239Z", "modified": "2026-10-01T19:54:13.767239Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--572fcd23-68a2-5ffc-b640-b3d954d0d19c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767303Z", "modified": "2026-10-01T19:54:13.767303Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--17850287-1d68-5d3d-ae72-8eb574be22fd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767363Z", "modified": "2026-10-01T19:54:13.767363Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--294e820d-d030-5b32-92fc-490cab605fcd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767421Z", "modified": "2026-10-01T19:54:13.767421Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e19fd08a-8035-52ab-b7b8-5f59d23be889", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.76748Z", "modified": "2026-10-01T19:54:13.76748Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3c712f6-6a23-5391-b37e-b81d239eed91", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767539Z", "modified": "2026-10-01T19:54:13.767539Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2001aa1d-7cad-5191-b711-ab68f0256f81", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767598Z", "modified": "2026-10-01T19:54:13.767598Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c222f4e6-06fa-5bb6-9f56-156f027d0c5a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767656Z", "modified": "2026-10-01T19:54:13.767656Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--555829b5-5d6d-5889-891d-75db8c10fdc7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767715Z", "modified": "2026-10-01T19:54:13.767715Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f05a14a7-8733-5798-972c-91ce11e88982", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767776Z", "modified": "2026-10-01T19:54:13.767776Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--06820f7d-ed87-56d4-aa41-792e1b88c07b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767838Z", "modified": "2026-10-01T19:54:13.767838Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--91e54f9f-355b-564e-89bb-78030012ba24", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.7679Z", "modified": "2026-10-01T19:54:13.7679Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--73885385-c1f9-5ddf-8f71-f06c3f7f630b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.767959Z", "modified": "2026-10-01T19:54:13.767959Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--72c8e875-d574-55dd-bdb6-98d2caf8ac87", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768018Z", "modified": "2026-10-01T19:54:13.768018Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe8d7440-1922-5961-9e4b-5dcc37e92c4e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768076Z", "modified": "2026-10-01T19:54:13.768076Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b1c052d0-8367-5cff-8a67-63c92b117373", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768134Z", "modified": "2026-10-01T19:54:13.768134Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fabfdbe7-35e5-58e5-a8e8-35586476f1fd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768192Z", "modified": "2026-10-01T19:54:13.768192Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3df40ce5-12ee-5d39-bfa6-7ae3c24fa88b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768253Z", "modified": "2026-10-01T19:54:13.768253Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--975e0156-06f4-5da7-b8d6-04729d14843f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768312Z", "modified": "2026-10-01T19:54:13.768312Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e88ea0d3-b3b3-5d80-855b-c8cecfd3b18f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768372Z", "modified": "2026-10-01T19:54:13.768372Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--73a873f4-9c56-5b57-9f18-f9d500906469", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768432Z", "modified": "2026-10-01T19:54:13.768432Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bc891c8d-6499-58db-85b7-321e4f3dc0b7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768492Z", "modified": "2026-10-01T19:54:13.768492Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--adfeb6f0-4e5c-5cdd-9554-96d245b12f62", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768551Z", "modified": "2026-10-01T19:54:13.768551Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9c4147e8-6c94-5a51-a5ac-4a446dd2fb15", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.76861Z", "modified": "2026-10-01T19:54:13.76861Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b63bac8-2ec2-5236-90e1-1b1326b3965a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768667Z", "modified": "2026-10-01T19:54:13.768667Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ac887039-ee68-588e-87a1-2c2c5304be4d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768727Z", "modified": "2026-10-01T19:54:13.768727Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--272699aa-6172-583c-a8e9-120bd678515b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768785Z", "modified": "2026-10-01T19:54:13.768785Z", "relationship_type": "uses", "source_ref": "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8fc75895-29fc-547b-9a67-dda08b776c91", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768848Z", "modified": "2026-10-01T19:54:13.768848Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--649f7b18-8bf6-5791-8cd0-07a52be65143", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768906Z", "modified": "2026-10-01T19:54:13.768906Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7dd58f0f-c23a-55a2-94a8-0003165fd516", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.768965Z", "modified": "2026-10-01T19:54:13.768965Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--770693c7-d96b-5672-afe2-f392dea6b110", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769025Z", "modified": "2026-10-01T19:54:13.769025Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fec6b6c8-ca7a-5afe-bea5-3fbee772ce90", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769086Z", "modified": "2026-10-01T19:54:13.769086Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--59c08785-a2d2-5bbd-bf6c-61063adacdf8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769145Z", "modified": "2026-10-01T19:54:13.769145Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c65df877-8609-5514-adb7-828baa611361", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769208Z", "modified": "2026-10-01T19:54:13.769208Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b419d71b-11b1-56ea-b39d-b1e4a93706bb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769266Z", "modified": "2026-10-01T19:54:13.769266Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7be983e3-6069-588b-b990-c52b38c6ccf4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769324Z", "modified": "2026-10-01T19:54:13.769324Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3734dd6d-3a70-5b33-a9e6-d5848677e6fb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769383Z", "modified": "2026-10-01T19:54:13.769383Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de9ae70a-90df-5c63-a244-d3c30f05d629", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769444Z", "modified": "2026-10-01T19:54:13.769444Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--843fb8c9-611f-5c08-ad2b-8826e9c4cc7c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769503Z", "modified": "2026-10-01T19:54:13.769503Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eb005ddd-73a3-52a4-977c-a0c996f53ac9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769562Z", "modified": "2026-10-01T19:54:13.769562Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48f5a633-7c19-5c78-98c6-236324c61b96", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769621Z", "modified": "2026-10-01T19:54:13.769621Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01aff6b7-04e7-5326-946c-b413f6b056e7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769684Z", "modified": "2026-10-01T19:54:13.769684Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--da082c11-48ac-5c3f-a970-ea910c44a462", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769744Z", "modified": "2026-10-01T19:54:13.769744Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5550526e-baec-5539-832f-a65febf5c561", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769808Z", "modified": "2026-10-01T19:54:13.769808Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c350a7f4-dc72-5e19-b201-e359429072ca", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769868Z", "modified": "2026-10-01T19:54:13.769868Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f6d66912-59bf-5377-8559-e32f21e9315b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769927Z", "modified": "2026-10-01T19:54:13.769927Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--34e23f1a-6ffe-5870-b1ff-a855f64f7659", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.769986Z", "modified": "2026-10-01T19:54:13.769986Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0318cf51-3409-571e-b983-e087abf7dade", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770046Z", "modified": "2026-10-01T19:54:13.770046Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--371ab67d-4373-596c-a238-2b0a5ddcb816", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770104Z", "modified": "2026-10-01T19:54:13.770104Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cbec2581-3c7d-5dbb-b739-e37c07d91d15", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770166Z", "modified": "2026-10-01T19:54:13.770166Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e3f914a2-38cb-5e3c-8329-abe447ed6000", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770224Z", "modified": "2026-10-01T19:54:13.770224Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5cc83176-62a6-5753-87e5-64ee723f8634", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770285Z", "modified": "2026-10-01T19:54:13.770285Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e9eff53-54d6-5617-9a4d-30a3f3e06847", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770344Z", "modified": "2026-10-01T19:54:13.770344Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b61913cb-eb98-5329-8aa9-204845137021", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770403Z", "modified": "2026-10-01T19:54:13.770403Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d50cf1e5-66a3-5bb1-a635-3c299f563759", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770461Z", "modified": "2026-10-01T19:54:13.770461Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08acc5f6-cfa8-5419-b002-83bb71d18724", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770519Z", "modified": "2026-10-01T19:54:13.770519Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--37913099-19fe-5cfa-86f4-780aae05cc91", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770578Z", "modified": "2026-10-01T19:54:13.770578Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68532b26-708f-5218-b357-6a7eb83b3d51", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77064Z", "modified": "2026-10-01T19:54:13.77064Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--88844c4e-92c0-54a2-94d0-0358f33f7219", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770699Z", "modified": "2026-10-01T19:54:13.770699Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50d9e6ed-2f3b-5032-8287-9b8e6c9b724f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770757Z", "modified": "2026-10-01T19:54:13.770757Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca5d276e-45a0-591f-b29c-5b35018fb052", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77082Z", "modified": "2026-10-01T19:54:13.77082Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7525f0e8-d2d7-5077-8e82-ccbd4679306e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770898Z", "modified": "2026-10-01T19:54:13.770898Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--235aa10b-b4f2-530b-9d8e-7fadcd01117a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.770972Z", "modified": "2026-10-01T19:54:13.770972Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47797fa9-5747-5a5a-b01f-069dff4f0cbc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771033Z", "modified": "2026-10-01T19:54:13.771033Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18b29b03-7a47-590a-abfd-1a38051e600e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771093Z", "modified": "2026-10-01T19:54:13.771093Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2f2f8c0-1c90-5b18-aeee-a102a4516ceb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771154Z", "modified": "2026-10-01T19:54:13.771154Z", "relationship_type": "uses", "source_ref": "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--55a39792-555c-5c65-a332-faa795290c04", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771216Z", "modified": "2026-10-01T19:54:13.771216Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1abe4260-bd40-5cc3-9cff-aebb273db545", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771275Z", "modified": "2026-10-01T19:54:13.771275Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bbd67fe5-5493-5891-8b79-1c0d32d947c4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771334Z", "modified": "2026-10-01T19:54:13.771334Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca24b97d-d5b7-5ae9-86e2-45d11b9227fa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771392Z", "modified": "2026-10-01T19:54:13.771392Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2b0898f-0157-58e5-8bc4-ae8f54f1cfa2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771451Z", "modified": "2026-10-01T19:54:13.771451Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49b083c8-3e0a-52d9-b5c0-de910e630f36", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771512Z", "modified": "2026-10-01T19:54:13.771512Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5bbb5b7f-0e96-5217-8b12-b8b081ec819e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771571Z", "modified": "2026-10-01T19:54:13.771571Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e128330-56ab-51b0-a2b7-618bcae329be", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771633Z", "modified": "2026-10-01T19:54:13.771633Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2233e2a2-3b64-5118-aa50-dd6cf85256fb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771692Z", "modified": "2026-10-01T19:54:13.771692Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cee27a48-9ca4-5dba-905f-b849b21f1099", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771751Z", "modified": "2026-10-01T19:54:13.771751Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a96c8687-7efa-5414-be14-8f27c7c8b25d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771812Z", "modified": "2026-10-01T19:54:13.771812Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--946fd93d-5c3d-51b5-8a1a-ed0b945ff58c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771871Z", "modified": "2026-10-01T19:54:13.771871Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d20a7d94-9e94-58cd-92e2-a88969bf8d81", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771929Z", "modified": "2026-10-01T19:54:13.771929Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bec86933-f0bc-5325-8c72-6e806029ae0a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.771989Z", "modified": "2026-10-01T19:54:13.771989Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--13fd6f93-e992-5fc5-ba73-d946ebf2b23e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.772047Z", "modified": "2026-10-01T19:54:13.772047Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4974ce2f-dae9-5dfe-9c58-892fb69e8ad2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.772111Z", "modified": "2026-10-01T19:54:13.772111Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c91b2ead-43a1-5fd0-bfd0-94b16c135c8f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77217Z", "modified": "2026-10-01T19:54:13.77217Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48287bbd-87c9-5e79-a967-307c5ef175e0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.772231Z", "modified": "2026-10-01T19:54:13.772231Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b7526af-10ce-5052-9810-498cca1ef4d3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77229Z", "modified": "2026-10-01T19:54:13.77229Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2cf185e8-0f1d-5e3b-980d-9e13f9cd7771", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.772351Z", "modified": "2026-10-01T19:54:13.772351Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b36537c4-5486-5be0-82b4-609d3f0f78bc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77241Z", "modified": "2026-10-01T19:54:13.77241Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e0057b74-3276-5522-be3a-2f41d513782c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.772468Z", "modified": "2026-10-01T19:54:13.772468Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--864bc1e5-3f01-5ad6-86c4-6d21b7d294bc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.772526Z", "modified": "2026-10-01T19:54:13.772526Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0791fc95-56e4-5445-a889-849e2863d537", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.772588Z", "modified": "2026-10-01T19:54:13.772588Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--869b8cd8-d486-5840-9116-6b216d9b2703", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.772647Z", "modified": "2026-10-01T19:54:13.772647Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64576abf-e657-5464-a32c-fcb498cb3953", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.772708Z", "modified": "2026-10-01T19:54:13.772708Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1d0298ae-4a66-5598-9b54-14bdbc98bcb6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.772766Z", "modified": "2026-10-01T19:54:13.772766Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--15d1ddee-af46-5925-bc46-2b83c6117737", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.772829Z", "modified": "2026-10-01T19:54:13.772829Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3f4f8367-d3a1-5298-81a5-d7f068e998cb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.772888Z", "modified": "2026-10-01T19:54:13.772888Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6af3bb0f-cf4b-5457-af32-a6364f94ad49", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.772946Z", "modified": "2026-10-01T19:54:13.772946Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d6a00084-22b4-55fd-aadc-ad31ea301bf6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773005Z", "modified": "2026-10-01T19:54:13.773005Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b0c5e85c-3b5c-5586-8135-7e371ef3973f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773066Z", "modified": "2026-10-01T19:54:13.773066Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--13668a24-d044-5d86-a055-1d2574f3c592", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773126Z", "modified": "2026-10-01T19:54:13.773126Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--23ac6f91-8b73-57f7-8586-073b0ec34f0e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773185Z", "modified": "2026-10-01T19:54:13.773185Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9f9af60f-a685-56ce-abcf-59904fd56640", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773244Z", "modified": "2026-10-01T19:54:13.773244Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2c0f5229-0407-559a-841d-50f0033083de", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773306Z", "modified": "2026-10-01T19:54:13.773306Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--84509407-3d63-5a04-96b3-805f2c53c01b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773367Z", "modified": "2026-10-01T19:54:13.773367Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48b9c333-db21-5a3c-886b-45995b31d57f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773426Z", "modified": "2026-10-01T19:54:13.773426Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3317a11a-e89a-5cca-a427-60fdb3982cce", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773487Z", "modified": "2026-10-01T19:54:13.773487Z", "relationship_type": "uses", "source_ref": "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c5aa696-5d01-55cc-931a-30cb4b85963f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773545Z", "modified": "2026-10-01T19:54:13.773545Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5412de4d-58dc-59f6-a5d2-98a016031124", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773604Z", "modified": "2026-10-01T19:54:13.773604Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a0be9735-bc91-5a7d-8bf5-32f30d4a9ab1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773661Z", "modified": "2026-10-01T19:54:13.773661Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1eade736-b54c-51e0-8bf1-42be95663689", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77372Z", "modified": "2026-10-01T19:54:13.77372Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c19a7c74-5896-57be-83b1-a688bdd56718", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773779Z", "modified": "2026-10-01T19:54:13.773779Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5dbd7585-85d2-5810-a3aa-09d3affd4f82", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773859Z", "modified": "2026-10-01T19:54:13.773859Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8033d822-0d64-573d-990b-665845c116c7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773922Z", "modified": "2026-10-01T19:54:13.773922Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--62d664bc-e1c8-54d5-93d3-a7fa0b8d1cc6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.773983Z", "modified": "2026-10-01T19:54:13.773983Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2a3eb5a-cc9a-534a-b2f8-5cce03b3661e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774042Z", "modified": "2026-10-01T19:54:13.774042Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1be38997-5804-5ba8-9907-3a7fbf69e3a0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.7741Z", "modified": "2026-10-01T19:54:13.7741Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4d23ead-7d10-53e7-8a1c-bc36f5b5bee7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77416Z", "modified": "2026-10-01T19:54:13.77416Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c9942ae1-7b8c-51c8-9bcc-60718cba045b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774219Z", "modified": "2026-10-01T19:54:13.774219Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb9e9a8e-4856-5411-85bd-40300db2dd62", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774278Z", "modified": "2026-10-01T19:54:13.774278Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0fa7bf77-4cc6-5edf-b964-ecfd2e5595cd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774337Z", "modified": "2026-10-01T19:54:13.774337Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--512cf649-58be-5823-bed4-4a04f1e468b2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774396Z", "modified": "2026-10-01T19:54:13.774396Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4cb3f716-94ee-5e03-a8cc-a27ebddd2623", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774456Z", "modified": "2026-10-01T19:54:13.774456Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e87863d-bbcf-571c-bb26-4d444f7c451f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774517Z", "modified": "2026-10-01T19:54:13.774517Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--565ee435-a068-5d60-acf0-5f525ce3a501", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774576Z", "modified": "2026-10-01T19:54:13.774576Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c34b304-e532-54e5-9899-9e52de2045e6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774635Z", "modified": "2026-10-01T19:54:13.774635Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--58251c99-a3e1-586a-a92a-649302c51e29", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774694Z", "modified": "2026-10-01T19:54:13.774694Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fd24d243-0d46-5653-8289-739206ef7489", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774752Z", "modified": "2026-10-01T19:54:13.774752Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d72a659f-aa94-5d54-83d2-adcec959b763", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774814Z", "modified": "2026-10-01T19:54:13.774814Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97722bfd-c663-57a8-83cb-538d69062c88", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774874Z", "modified": "2026-10-01T19:54:13.774874Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--285437f5-f672-5da1-86d5-6918cf5cb369", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.774939Z", "modified": "2026-10-01T19:54:13.774939Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--841225a3-6376-550a-b216-339df99cd7d1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775007Z", "modified": "2026-10-01T19:54:13.775007Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c4fcaec5-d332-591a-ba9d-1b03b71d92fa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775077Z", "modified": "2026-10-01T19:54:13.775077Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4a54cb94-9cd5-5040-abdc-6285686deb5c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775139Z", "modified": "2026-10-01T19:54:13.775139Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--24066619-f7de-5502-b4bc-644bff80d61e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775201Z", "modified": "2026-10-01T19:54:13.775201Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--922eec99-be97-5b94-9382-e608c761254b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775261Z", "modified": "2026-10-01T19:54:13.775261Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--359b5614-c088-57ae-aef7-47eccf97b34c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775321Z", "modified": "2026-10-01T19:54:13.775321Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--576d7247-6dd4-5794-a230-72f0f1660b25", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77538Z", "modified": "2026-10-01T19:54:13.77538Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ddf7a79f-a9d0-50a0-b562-2b9e16a28be6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775444Z", "modified": "2026-10-01T19:54:13.775444Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec568770-bdb5-5744-a904-821b55a6e240", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775503Z", "modified": "2026-10-01T19:54:13.775503Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f6902c20-3cf4-5be9-82ae-3851121bdc6c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775563Z", "modified": "2026-10-01T19:54:13.775563Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--75dc0f18-96dc-5900-bf39-36e94298a66c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775624Z", "modified": "2026-10-01T19:54:13.775624Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e691f130-ce44-5e4a-af58-8d9854c40f73", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775683Z", "modified": "2026-10-01T19:54:13.775683Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--817090c1-95b6-59fd-90c9-fbaa35193add", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775743Z", "modified": "2026-10-01T19:54:13.775743Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6da619fe-6511-52c6-b480-fdef35827738", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775806Z", "modified": "2026-10-01T19:54:13.775806Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--699c5b3c-fc44-5227-b3f1-1a9a20ee1932", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775866Z", "modified": "2026-10-01T19:54:13.775866Z", "relationship_type": "uses", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1633fe8a-2ba2-5084-8707-8c110d02eade", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775929Z", "modified": "2026-10-01T19:54:13.775929Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f7a8b43-6953-5fcf-8726-1c1cd00820fc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.775989Z", "modified": "2026-10-01T19:54:13.775989Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2e8cf6d-ea50-5fe0-b4ef-aa0b2e6014ee", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776048Z", "modified": "2026-10-01T19:54:13.776048Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50f37172-9da5-52d4-96dd-a6b93fd8e9f2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776107Z", "modified": "2026-10-01T19:54:13.776107Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--61695452-7e60-5d5c-a5ed-2bcc745e762c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776167Z", "modified": "2026-10-01T19:54:13.776167Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--260be228-0129-5f9b-a94e-c10825c6f388", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776226Z", "modified": "2026-10-01T19:54:13.776226Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9a6feea-1c7b-56d8-84cc-6bd6fbc96049", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776285Z", "modified": "2026-10-01T19:54:13.776285Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1a5d4784-c8e1-5a17-96e5-acc0ea6d6c2a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776346Z", "modified": "2026-10-01T19:54:13.776346Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--816a9a90-f0c0-5348-8952-4bc5d1f4ac5c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776407Z", "modified": "2026-10-01T19:54:13.776407Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a59eaada-88ce-5234-8809-058e99ad5659", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776466Z", "modified": "2026-10-01T19:54:13.776466Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e18a8f5-04ba-520b-8a83-d70abef14135", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776526Z", "modified": "2026-10-01T19:54:13.776526Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79f2e911-b3fe-5a01-8bd6-99d2fc221f87", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776585Z", "modified": "2026-10-01T19:54:13.776585Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c403f4dd-d728-5786-921e-0305f6a0d02e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776643Z", "modified": "2026-10-01T19:54:13.776643Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--164561aa-8586-52db-9da1-20b8f87148fd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776702Z", "modified": "2026-10-01T19:54:13.776702Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cf429da7-9934-57d3-b3ba-25a4062f1b0b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77676Z", "modified": "2026-10-01T19:54:13.77676Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca929b44-f7fa-56a7-b485-e59f0d8a82c3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776823Z", "modified": "2026-10-01T19:54:13.776823Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa725def-45a2-5e23-90bf-588cf5491bd1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776885Z", "modified": "2026-10-01T19:54:13.776885Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b41ae52b-4cde-5ad6-80ac-e84675ebeedc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.776946Z", "modified": "2026-10-01T19:54:13.776946Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9736aa2-88d4-5da9-94a0-00a1ebc24439", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777005Z", "modified": "2026-10-01T19:54:13.777005Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eb260b2e-6d15-5941-bd7b-51bd227d19cb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777063Z", "modified": "2026-10-01T19:54:13.777063Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dce9a242-915e-5dac-950c-4bccc99dc0e3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777122Z", "modified": "2026-10-01T19:54:13.777122Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b266df4e-50aa-530e-83d0-22c8b0740fb7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777181Z", "modified": "2026-10-01T19:54:13.777181Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc9129a0-28bd-5ec6-98f2-ead89ebf345d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777239Z", "modified": "2026-10-01T19:54:13.777239Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c68bd546-be05-5c21-a84d-25f117fa966a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777298Z", "modified": "2026-10-01T19:54:13.777298Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8abba56-2670-55a5-ae4d-e8f4cf70d170", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77736Z", "modified": "2026-10-01T19:54:13.77736Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f57a89f3-8b3e-5788-b1df-77aa0115c37a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777419Z", "modified": "2026-10-01T19:54:13.777419Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--17ea6306-d31a-51f4-b471-cbb761387553", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777479Z", "modified": "2026-10-01T19:54:13.777479Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b118382f-3c9d-5dfb-b05a-9e6f585767b6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777541Z", "modified": "2026-10-01T19:54:13.777541Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e41f78e5-e2c6-5fe7-a7f3-6ee42305118e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777602Z", "modified": "2026-10-01T19:54:13.777602Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1bffc7ef-6062-589f-94d3-f5162e70a6d1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777661Z", "modified": "2026-10-01T19:54:13.777661Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--917366c8-04eb-5966-b33c-c0f9f90220fe", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777719Z", "modified": "2026-10-01T19:54:13.777719Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0edf86fa-6c33-563c-b44f-2855cc0c3bda", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77778Z", "modified": "2026-10-01T19:54:13.77778Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--606dfaf8-0048-5172-ad38-42825605994b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777845Z", "modified": "2026-10-01T19:54:13.777845Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--998b61ff-bb66-52a6-8890-19db5702abc9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777905Z", "modified": "2026-10-01T19:54:13.777905Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--38bda41f-f26f-5abd-b9d8-c275e3b03ca1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.777963Z", "modified": "2026-10-01T19:54:13.777963Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3afedd08-6e8c-5b21-83bc-39a5726168a5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778022Z", "modified": "2026-10-01T19:54:13.778022Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f33f441c-80eb-550e-87cb-264d252c8701", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77808Z", "modified": "2026-10-01T19:54:13.77808Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8f27cdb0-6629-572d-b3b1-d009854d8fcc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778141Z", "modified": "2026-10-01T19:54:13.778141Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--718ecb3e-cfe2-54d7-9284-d1f973b64023", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778201Z", "modified": "2026-10-01T19:54:13.778201Z", "relationship_type": "uses", "source_ref": "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--65e78946-f31e-5e5a-bd78-59ad4d6a68f1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77826Z", "modified": "2026-10-01T19:54:13.77826Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a5c91c1-e3c4-56c4-80da-7aed72ea638a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77832Z", "modified": "2026-10-01T19:54:13.77832Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--14e4f738-a592-53d0-ae7c-3ebf4d53df9d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778379Z", "modified": "2026-10-01T19:54:13.778379Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--700ac56c-98cc-587c-8cd4-d3f13ecf190b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778438Z", "modified": "2026-10-01T19:54:13.778438Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e284984-436c-59f6-bf45-52ab54671d9a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778497Z", "modified": "2026-10-01T19:54:13.778497Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--516e85a9-2a26-5df3-8fcd-73ef2d32d0bf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778555Z", "modified": "2026-10-01T19:54:13.778555Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee7215f3-7d4c-596a-a244-fe6ec50ba7f0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778613Z", "modified": "2026-10-01T19:54:13.778613Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0cc36883-8ee6-532e-a96b-fcc3bb5bc354", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778672Z", "modified": "2026-10-01T19:54:13.778672Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8655f635-2b64-5c0e-85a2-ff0dc98defb8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778733Z", "modified": "2026-10-01T19:54:13.778733Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--21027593-add7-53d9-aa9d-22577137b8f4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778793Z", "modified": "2026-10-01T19:54:13.778793Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6d1a9d77-91ec-58cd-b2d1-f3d43a50b45a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778858Z", "modified": "2026-10-01T19:54:13.778858Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e0c23d9-a356-5eaf-8219-7db10c882870", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778918Z", "modified": "2026-10-01T19:54:13.778918Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c296c5fa-2419-556a-87f4-cd956c4856e1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.778977Z", "modified": "2026-10-01T19:54:13.778977Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--939d8ed8-41d9-5ef1-b560-e87cd63b7c70", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779037Z", "modified": "2026-10-01T19:54:13.779037Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e865d8fd-609e-579d-be17-563e79b28962", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779097Z", "modified": "2026-10-01T19:54:13.779097Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--283bd16c-3d95-54fa-b983-0fa41d314dd2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779156Z", "modified": "2026-10-01T19:54:13.779156Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f2af185-2584-595a-9c03-da8ce07a32a9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779215Z", "modified": "2026-10-01T19:54:13.779215Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--00180e51-1ec4-524a-9db1-3dbde615c03e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779276Z", "modified": "2026-10-01T19:54:13.779276Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--94bb4ebc-ec35-5dd9-97d1-aa0bc7936620", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779337Z", "modified": "2026-10-01T19:54:13.779337Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6b14ad00-5812-5f96-b64c-f2ebd537315a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779396Z", "modified": "2026-10-01T19:54:13.779396Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47d472f9-2894-5b1c-baaa-233dbdae54da", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779456Z", "modified": "2026-10-01T19:54:13.779456Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--04e8cc11-bb8b-5466-8d9b-b44eb08cc0bb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779515Z", "modified": "2026-10-01T19:54:13.779515Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cdc1280d-bdf4-5e20-abcb-3af4a676d992", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779573Z", "modified": "2026-10-01T19:54:13.779573Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1bcc0c99-9961-58dc-9f4a-274deaa58c0e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779632Z", "modified": "2026-10-01T19:54:13.779632Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20a87817-2fae-5119-a837-b4d80e74e5c8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77969Z", "modified": "2026-10-01T19:54:13.77969Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0cfe00d0-7af4-5dc6-8586-4984a956a544", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.77975Z", "modified": "2026-10-01T19:54:13.77975Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4a34f757-9d57-571b-ab24-1c361343ca30", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779812Z", "modified": "2026-10-01T19:54:13.779812Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bfcea76f-9a61-5d9f-8edd-7ee2b759c8ec", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779872Z", "modified": "2026-10-01T19:54:13.779872Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b9f06e0f-002b-562c-baff-5f73f2468ed3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779935Z", "modified": "2026-10-01T19:54:13.779935Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--435974a2-f08f-5c28-8a8f-e57be15f5b5b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.779996Z", "modified": "2026-10-01T19:54:13.779996Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8e5b146-b87b-542c-a376-3971cd70c394", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.780059Z", "modified": "2026-10-01T19:54:13.780059Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a7a322d-f180-509c-9925-b2f7e2f54cf0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.780118Z", "modified": "2026-10-01T19:54:13.780118Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f3176dab-1e17-5abd-92ae-3fee63730c11", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78018Z", "modified": "2026-10-01T19:54:13.78018Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d64eb4f0-4fbd-51f3-aee0-b91e4ee0deb6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78024Z", "modified": "2026-10-01T19:54:13.78024Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a8d09c91-c335-5cb2-b971-221cdc53cc80", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.7803Z", "modified": "2026-10-01T19:54:13.7803Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3389ca8-294b-5b3f-af66-4ae005015753", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.780359Z", "modified": "2026-10-01T19:54:13.780359Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4620be8d-d5ce-5c18-89bc-93e7a54a5b9c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.780418Z", "modified": "2026-10-01T19:54:13.780418Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc9d104e-3f66-597c-9af3-352703ac1b69", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.780476Z", "modified": "2026-10-01T19:54:13.780476Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e253fdf-2c8d-5fdb-9ef0-29d6b334ffce", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.780536Z", "modified": "2026-10-01T19:54:13.780536Z", "relationship_type": "uses", "source_ref": "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b956075-ecbd-52d8-9770-ac2ce63fa314", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.780596Z", "modified": "2026-10-01T19:54:13.780596Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1345c0e-ab00-5d70-8f9d-f757348f326d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.780654Z", "modified": "2026-10-01T19:54:13.780654Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f972b29e-ca45-5567-a41c-3d64327d93ac", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.780714Z", "modified": "2026-10-01T19:54:13.780714Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--918c1482-155c-5cb0-bf3f-bceb58da06fa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.780774Z", "modified": "2026-10-01T19:54:13.780774Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6b316427-db0d-57b2-ac33-a09308a03d9a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.7809Z", "modified": "2026-10-01T19:54:13.7809Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ae63f6e3-c74f-5c3c-b410-4933dfe87bcf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.780965Z", "modified": "2026-10-01T19:54:13.780965Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--282d67c4-688d-56e0-808d-0f320cd4be3b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781024Z", "modified": "2026-10-01T19:54:13.781024Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7fd9e7a0-24d2-548a-82ff-d70d7bf9fc11", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781083Z", "modified": "2026-10-01T19:54:13.781083Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8eebb1a8-f68b-5d7c-acab-0dfa667eef7c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781142Z", "modified": "2026-10-01T19:54:13.781142Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4120c398-c0ce-53e5-9432-adf4073523a3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781205Z", "modified": "2026-10-01T19:54:13.781205Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48140511-ce2d-545b-aaec-2f6bd4603d77", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781265Z", "modified": "2026-10-01T19:54:13.781265Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2bd1f726-7175-56c8-ba13-8a3ac4e6167e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781324Z", "modified": "2026-10-01T19:54:13.781324Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--829ebd2c-acb3-5b71-aeb9-3f3e5fae5d7a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781382Z", "modified": "2026-10-01T19:54:13.781382Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--edc10bbe-5860-5c13-9dc1-befd2fef6785", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781443Z", "modified": "2026-10-01T19:54:13.781443Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b8a33139-bb55-5af1-8f46-6435e136ce6b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781501Z", "modified": "2026-10-01T19:54:13.781501Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8af0377a-0bb2-5483-8ac8-8656c4588430", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78156Z", "modified": "2026-10-01T19:54:13.78156Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--752a9126-22c6-5415-98ad-fd8e6f1b19b4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781619Z", "modified": "2026-10-01T19:54:13.781619Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--03f831f8-f551-59a0-a797-d2dd4bc6be0d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781679Z", "modified": "2026-10-01T19:54:13.781679Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--90f0606e-c6f6-5358-a304-21c8d46c78f3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781737Z", "modified": "2026-10-01T19:54:13.781737Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8f86b1ae-98cb-59a0-8fc3-7ac8f5816f1d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781799Z", "modified": "2026-10-01T19:54:13.781799Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c01542ca-6449-5b10-8574-3df595690413", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78186Z", "modified": "2026-10-01T19:54:13.78186Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e1f05079-34da-55e2-8c35-bad4ab35a899", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781919Z", "modified": "2026-10-01T19:54:13.781919Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--852e8665-a250-5ad7-878b-a56bb01dd3c0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.781977Z", "modified": "2026-10-01T19:54:13.781977Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b044e771-2f95-534a-9473-be9acb00f77c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782036Z", "modified": "2026-10-01T19:54:13.782036Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d045074d-af2b-5e87-ba2e-8f93e53755b4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782094Z", "modified": "2026-10-01T19:54:13.782094Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9f3cd811-0124-5f33-99da-64d217d0801b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782156Z", "modified": "2026-10-01T19:54:13.782156Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cbcd49ea-1384-5bd4-89d2-9966ae647497", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782215Z", "modified": "2026-10-01T19:54:13.782215Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e99932d4-2a59-5396-9dc0-36b9ebfd950a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782273Z", "modified": "2026-10-01T19:54:13.782273Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--532c1278-e2b5-5e5d-9c62-9ca97fbea257", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782331Z", "modified": "2026-10-01T19:54:13.782331Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e4cc299-f5ec-59d2-8da9-c5aecc3f43e3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782392Z", "modified": "2026-10-01T19:54:13.782392Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e9897a5-626e-5ccb-b06a-65435b3eee31", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782451Z", "modified": "2026-10-01T19:54:13.782451Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--826e800e-822e-50b3-b82f-1616169bed79", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782509Z", "modified": "2026-10-01T19:54:13.782509Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c96608f-5e56-56d4-94fb-6ee2023dd3af", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782567Z", "modified": "2026-10-01T19:54:13.782567Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fff1541b-2476-55e4-a728-ab971db7611f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782629Z", "modified": "2026-10-01T19:54:13.782629Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5f9135fc-5746-5641-90c1-42cbdcc6f86e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782689Z", "modified": "2026-10-01T19:54:13.782689Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01dc40a3-107f-5e04-8887-4e308484df78", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782747Z", "modified": "2026-10-01T19:54:13.782747Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--60f0c03b-c14d-52c8-818b-dd2365e5afaf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782811Z", "modified": "2026-10-01T19:54:13.782811Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20348f87-d27b-5032-bcb8-5088723e5b85", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782872Z", "modified": "2026-10-01T19:54:13.782872Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f0b7ab62-88ca-5c54-a597-a453f481201e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782931Z", "modified": "2026-10-01T19:54:13.782931Z", "relationship_type": "uses", "source_ref": "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8134b82-b6fb-54cf-a3da-cf2e633304f1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.782993Z", "modified": "2026-10-01T19:54:13.782993Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b490b48f-7365-53db-bdb5-4b01d8f2096d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783052Z", "modified": "2026-10-01T19:54:13.783052Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a43cabe3-2330-5b33-9c0b-38eb215c311b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783113Z", "modified": "2026-10-01T19:54:13.783113Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4405a682-5f14-51b3-8bbc-14946635a8c7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783173Z", "modified": "2026-10-01T19:54:13.783173Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--74bbc50c-add8-5799-a4e6-d9e87180443c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783232Z", "modified": "2026-10-01T19:54:13.783232Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e29bd32d-1aaa-57ee-8388-8e0928bd3686", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78329Z", "modified": "2026-10-01T19:54:13.78329Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1df1d3fb-895f-5056-ae84-8b55ab6fc3e0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783349Z", "modified": "2026-10-01T19:54:13.783349Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a75c87da-80a6-584b-933e-a9ded6996809", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783408Z", "modified": "2026-10-01T19:54:13.783408Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cde45747-693b-5fb0-8234-fba16547e060", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783466Z", "modified": "2026-10-01T19:54:13.783466Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cfc73050-fb2c-54e6-8936-ab77f3ce3324", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783524Z", "modified": "2026-10-01T19:54:13.783524Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc29fc55-28e9-51a7-8dc1-2c2533603fe3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783584Z", "modified": "2026-10-01T19:54:13.783584Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1bdd06e-6a20-5160-ac76-63c3763c6b55", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783644Z", "modified": "2026-10-01T19:54:13.783644Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--abb3c860-2381-5b91-9079-f97172136272", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783702Z", "modified": "2026-10-01T19:54:13.783702Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--67591528-19ab-5da8-92be-4c7ce33bb0cb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783762Z", "modified": "2026-10-01T19:54:13.783762Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--db1a1c4f-f515-57e2-8fae-0900f3d07c75", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783825Z", "modified": "2026-10-01T19:54:13.783825Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c29bd94-46c6-5a89-a446-70557fd2a40a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783884Z", "modified": "2026-10-01T19:54:13.783884Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4134ea07-c6f3-5260-b64a-71d083a911c9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.783943Z", "modified": "2026-10-01T19:54:13.783943Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--87b08ea8-408a-5c95-a774-994bb4a27e9d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.784004Z", "modified": "2026-10-01T19:54:13.784004Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--642170ea-2f6d-51df-af39-f3b3def35f89", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.784064Z", "modified": "2026-10-01T19:54:13.784064Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a521e1b3-ad81-51ba-b0db-24dd8e2f94e3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.784123Z", "modified": "2026-10-01T19:54:13.784123Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--44723167-5efb-5049-b497-9813ef43e219", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.784184Z", "modified": "2026-10-01T19:54:13.784184Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7db30453-ee72-556b-8579-f45c372f2b9d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.784244Z", "modified": "2026-10-01T19:54:13.784244Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4636dda9-bf6c-55bb-9043-0c9c62701b75", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.784302Z", "modified": "2026-10-01T19:54:13.784302Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c9b034bc-0ead-5fa4-96c5-1b3b95c113d2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.784362Z", "modified": "2026-10-01T19:54:13.784362Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9c59d203-c0ed-516d-8c84-272420516b3e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.784421Z", "modified": "2026-10-01T19:54:13.784421Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a7320cb-e77a-5f5c-b542-63c69a64e466", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78448Z", "modified": "2026-10-01T19:54:13.78448Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e09f29c-a7bf-5196-a18e-9c0f5ec1882d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.784541Z", "modified": "2026-10-01T19:54:13.784541Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2a94cca-0ce3-5258-a25d-f13d412c749b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.7846Z", "modified": "2026-10-01T19:54:13.7846Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9ed03c73-9aa9-5fe0-bc40-72c35d74f228", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.784658Z", "modified": "2026-10-01T19:54:13.784658Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18f2b0e7-f86c-5a7a-904d-827db4067737", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.784717Z", "modified": "2026-10-01T19:54:13.784717Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--670a8e4c-83ce-5bf8-ad0c-f99efe30e9cb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.784778Z", "modified": "2026-10-01T19:54:13.784778Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e6b59488-760f-5d5a-8e0e-3ca12cfafb13", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78484Z", "modified": "2026-10-01T19:54:13.78484Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cd7eaf1e-e4eb-5052-b349-dc9117634907", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.7849Z", "modified": "2026-10-01T19:54:13.7849Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dbee45bb-b4f1-529a-b6ac-86580b3158c8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.784959Z", "modified": "2026-10-01T19:54:13.784959Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b7614a1f-a5e3-57ae-b8b8-acbac9c9f0ba", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78502Z", "modified": "2026-10-01T19:54:13.78502Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--45abdb1c-90bb-5b2c-bfe7-8ae1c98d9b81", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.785079Z", "modified": "2026-10-01T19:54:13.785079Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--56e4c670-8400-5c9d-8605-eb7b9391fefd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.785137Z", "modified": "2026-10-01T19:54:13.785137Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9d7368d0-1241-5df4-8627-44a25487f17d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.785198Z", "modified": "2026-10-01T19:54:13.785198Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2a08186-290c-542a-a4b2-db2792a06cba", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.785259Z", "modified": "2026-10-01T19:54:13.785259Z", "relationship_type": "uses", "source_ref": "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2ba83d4-14a7-52a4-89e5-a2e015d6e8b1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.785318Z", "modified": "2026-10-01T19:54:13.785318Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e423a4ad-82fe-5295-9d43-920657558906", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.785425Z", "modified": "2026-10-01T19:54:13.785425Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2720091e-6be2-578d-828d-88d047e82c53", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.785498Z", "modified": "2026-10-01T19:54:13.785498Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--803b06cd-c33a-5675-af2f-78e4374184b1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.785561Z", "modified": "2026-10-01T19:54:13.785561Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--be3585d0-5571-53c6-a727-8eed56a7a4ee", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78562Z", "modified": "2026-10-01T19:54:13.78562Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a7deb06-6aec-5133-832b-85a997fc348e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78568Z", "modified": "2026-10-01T19:54:13.78568Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--055312b8-f3b8-5a70-bacc-c2eb44a01d17", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.785739Z", "modified": "2026-10-01T19:54:13.785739Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dce86aa6-d515-525b-a4b6-81a3779fed91", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.7858Z", "modified": "2026-10-01T19:54:13.7858Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5ece1f5-c01b-5b53-a4b9-ded0fc9fefc1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.785859Z", "modified": "2026-10-01T19:54:13.785859Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79f308e1-b3b7-564c-9f06-f702a71e31c3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.785918Z", "modified": "2026-10-01T19:54:13.785918Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ce79380d-2707-59d2-85c2-9f0784e24707", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.785976Z", "modified": "2026-10-01T19:54:13.785976Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c562f80-9dfa-5896-8d05-a7901054fcb8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786039Z", "modified": "2026-10-01T19:54:13.786039Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b71e97cd-d30a-54bb-9a9e-9c954dbbec7e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786097Z", "modified": "2026-10-01T19:54:13.786097Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--33b37618-8b0f-5047-9b1e-dfac233c9710", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786156Z", "modified": "2026-10-01T19:54:13.786156Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49f223db-17bd-5aff-a4d3-b9601d838b02", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786214Z", "modified": "2026-10-01T19:54:13.786214Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4afda88-c4be-58c1-a242-1b29c3653dad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786272Z", "modified": "2026-10-01T19:54:13.786272Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--409823c7-491a-5425-85f4-b8e66fa1d55f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78633Z", "modified": "2026-10-01T19:54:13.78633Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fec093f9-0ac4-59d9-87aa-7a6b40e55097", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786389Z", "modified": "2026-10-01T19:54:13.786389Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3394828-95a0-54e1-852a-1bb6c82302c9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786448Z", "modified": "2026-10-01T19:54:13.786448Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c943f75-1d82-5cd0-b33e-83d9c05c9bf8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78651Z", "modified": "2026-10-01T19:54:13.78651Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0d521830-9533-5272-865c-89b77527de8d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786571Z", "modified": "2026-10-01T19:54:13.786571Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9a23ada-64ea-5246-9a68-6750fcc27b83", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786632Z", "modified": "2026-10-01T19:54:13.786632Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e61a975-194f-5bbe-bda2-85daf2ca8e49", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786692Z", "modified": "2026-10-01T19:54:13.786692Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b448aae-3466-57c2-9571-684e6b82f99c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78675Z", "modified": "2026-10-01T19:54:13.78675Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ece6e7ee-755c-52f3-b95d-4f67b8a5324c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786813Z", "modified": "2026-10-01T19:54:13.786813Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3c93c04-38c4-5fce-9dc8-61c9e3ff9f12", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786873Z", "modified": "2026-10-01T19:54:13.786873Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--607bf7f7-fca7-5068-ae80-f002051b2086", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786932Z", "modified": "2026-10-01T19:54:13.786932Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9acb1af7-b254-55ed-87ce-4499329bf7e8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.786994Z", "modified": "2026-10-01T19:54:13.786994Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a9247325-67a4-50dc-a947-096d068b30bd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.787053Z", "modified": "2026-10-01T19:54:13.787053Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ae1ed1db-9987-558a-9162-b1419bf67ee3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.787111Z", "modified": "2026-10-01T19:54:13.787111Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eecbfbde-5406-569b-a920-9b098848364b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.78717Z", "modified": "2026-10-01T19:54:13.78717Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2ca729d-f9be-5490-ae33-54a80063a7d7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.787231Z", "modified": "2026-10-01T19:54:13.787231Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--238031b6-65cd-545e-a130-aa9e53c77360", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.787289Z", "modified": "2026-10-01T19:54:13.787289Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2c994d7-f80d-5362-91e3-185893722f7d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.787348Z", "modified": "2026-10-01T19:54:13.787348Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--85654ad8-cccd-524e-9547-388c42700288", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.787406Z", "modified": "2026-10-01T19:54:13.787406Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c325885-2608-5163-be96-fab4f51412cd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.787467Z", "modified": "2026-10-01T19:54:13.787467Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2fcf0bb-0ada-50ab-a98e-cf1addec29f3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.787526Z", "modified": "2026-10-01T19:54:13.787526Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9ca18ba3-17c7-515b-a56a-7f59f22cd43f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.787585Z", "modified": "2026-10-01T19:54:13.787585Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eb2ae224-f56e-5c24-aee1-88132598e947", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.787646Z", "modified": "2026-10-01T19:54:13.787646Z", "relationship_type": "uses", "source_ref": "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "target_ref": "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f928c99e-15bb-5773-a72d-84787845d9b7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.787706Z", "modified": "2026-10-01T19:54:13.787706Z", "relationship_type": "related-to", "source_ref": "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "target_ref": "tool--c56f982b-3d7f-5540-91f5-8575d8315c67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "report", "spec_version": "2.1", "id": "report--9aa555ca-d9d6-51c3-8af0-af351596d438", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-10-01T19:54:13.787945Z", "modified": "2026-10-11T14:08:24.334038Z", "name": "GHOST Cryptojacker Kit Family — Vova75Rus Kit-Author Supply Chain", "report_types": [ "threat-report" ], "published": "2026-05-25T00:00:00Z", "object_refs": [ "ipv4-addr--01667cb8-3c97-5586-8e24-d27194d922d8", "indicator--25c06a59-d267-5c27-92e7-73c12559f225", "ipv4-addr--7f6daaa1-cf23-5900-8670-4f3d89e74332", "indicator--31de5704-b9f1-5a38-af29-a1d3c16f093c", "domain-name--73087b89-df73-57b6-8b83-19d276c39d28", "indicator--4ba05cb5-2063-59d1-8c76-2a9f0848f359", "domain-name--5324675a-95fe-57ae-8d68-92d935706860", "domain-name--f59c038d-17eb-5db9-a047-536271a7f8cc", "indicator--c15d88ec-6a0d-5f85-bd50-d10c77034938", "domain-name--efa8dec6-16fc-5a4c-b899-a9661108b910", "indicator--ed1a4e8c-f8a4-5f4b-9385-23fe8ac3cf03", "domain-name--de3fa8dc-f23c-50c3-b544-0490ba3b86d4", "indicator--f45acd05-fede-5fa5-94ac-1cd78a421f2f", "domain-name--4e57536f-d092-56e5-8063-c68b54fc8340", "indicator--e1ed5be4-63e1-5abe-bc83-1c52bc8772dc", "url--5ce4450b-b005-5587-85a6-c9a7574f14d4", "indicator--e2ad61c2-820a-5176-9fe0-7dfe67f6b6e8", "url--2a3bd9ca-4e0b-5468-a083-31229ebc07d5", "indicator--f53751be-9c3c-5867-82e8-1940fb262b2e", "url--38223062-c1b6-5c69-938f-92b01becee18", "indicator--b821c58f-d17a-584d-ab7c-9660f78c3c73", "url--37c09452-19ee-53ee-b8bc-dc1145aa5e9c", "indicator--535731ea-77f8-59b0-b15c-63019ff12479", "url--fb08fc1b-bf12-5815-9f7c-acacad2e6b6d", "indicator--5f5b0e7e-a2e8-55be-b77c-86662db1b49e", "url--710664e2-c100-579c-92b0-7d120ff87ba7", "indicator--da981557-2e76-5cd5-8b5d-2bd5321fa1cc", "url--b1907458-d5db-593f-bdde-3c899a809ed5", "indicator--2942f30a-88a9-5385-8e95-065c37786c43", "url--b131345f-7f2f-5629-84a3-138177737c64", "indicator--0a40092b-291d-5d74-9d5c-c9b9e23e083e", "url--641cf062-6586-5e27-adee-ae9e5b174696", "indicator--3924a79f-39ad-51dd-b8e2-43ac4f8ee54c", "url--9e8596d0-361b-599c-9bbc-458c3773557e", "indicator--63081f19-a1d6-5053-a4b2-c426db9e40fb", "url--f385c410-27a7-53ae-b673-1b92031d9d9a", "indicator--a75c5beb-93b4-504f-b0cb-ba40949b8932", "url--4acee241-266a-50cc-9d29-0e06d15a1c33", "indicator--e24d7444-2d05-5cd9-b339-d3c1e963dcef", "url--aae4b515-0ce3-5820-84f2-f4e1c6bef4e4", "indicator--945c4ea1-5c16-55c9-a98c-dee7d2dfb993", "url--ab9e7e34-9ca1-50c7-8617-b08ee5919040", "indicator--861ba2a9-51e3-5eaa-b24c-6466bdc41ba9", "url--38324a9f-4ac7-5c84-95ec-361a4498a520", "indicator--44cedbec-2e5d-5a2b-9083-7412f44334e6", "url--4170286d-e8df-54f7-b26b-2f3fd4c5313d", "indicator--fd9b3cb2-de6e-5d1c-aec2-f8bd892dda95", "url--7b8c1702-71ea-5555-a9f7-5eee08bbf2c5", "indicator--5e0a3104-cc85-5091-9437-f5795d2171b1", "url--b15e151a-3c62-58d4-9ec8-4a8588c577bc", "indicator--3465630b-25cc-50fa-a9a4-bb1e2b64aa0a", "domain-name--e7840786-a916-5c8a-8589-f22ec7832462", "indicator--3b717480-1786-5beb-ab11-5c180da3de1d", "file--52c73e5e-98c8-5ea5-beb4-bfbde3847c21", "indicator--f1cd66d6-553a-5791-a654-204dd2e3a85b", "file--1a81de11-5521-5e95-be17-94ff0c5329eb", "file--83333950-4b98-5d26-9a67-44f8e641e1e1", "indicator--876ea16b-5804-5690-85ee-684bad2f221e", "file--d69636b5-9b6c-578f-8be2-698aaeacfca3", "indicator--616d755d-07d1-53b4-9af7-ceff7dff37e7", "file--3f3f0d01-7638-511e-bfc0-334e1600087f", "indicator--6e1517d0-ebed-56bf-ab6a-dbb1dc8a8021", "file--e9a30230-8d34-538d-99b3-36dcb416f146", "indicator--3dfaa4d5-4638-5546-9b78-e5e5a0f551b4", "file--49b1373f-d0d7-5e0d-b693-d306200931b4", "indicator--be07cd65-95b6-5ca4-8279-d70ba1dd7dad", "file--abfe340a-6db0-5e91-8192-b6b28dc7a151", "indicator--6d1bc44e-fe7e-5313-9aae-cffcd26c0997", "domain-name--599c408e-c4d7-5666-bb98-73a1064b0072", "domain-name--30251869-4ef6-5d4b-9c03-9105e254850f", "domain-name--02144e04-ed1d-5db8-bf2c-a8a02deced9e", "indicator--0b2abd83-408d-5507-b85e-bbffaaa202e7", "indicator--346e9bdf-0129-5bc8-9ecc-27f99e556375", "indicator--cca2fb59-54ea-5f41-b885-b4da230895bd", "indicator--20314fe5-2964-5a0b-9286-1ed16f20a4e1", "indicator--4182bc44-6b37-5f10-bbd3-b827e15835a5", "indicator--f4470d02-406f-5e86-8aad-0afb255bc3ad", "indicator--4d021958-4d7d-5ffe-8031-6ebb99e5279e", "indicator--07bfb3d0-8f9f-5216-8a80-1a52264e3174", "indicator--dce86bf3-3e8c-506b-ae70-83f378e532d6", "indicator--a484fc2f-55e0-5e06-9140-470c6da5d93f", "indicator--a1f7f480-7372-5967-950f-f5d9b8c4728c", "indicator--0f66f4ac-ff48-52cf-a0a0-f877dc42b4a4", "indicator--9fae4a61-8e3a-5de2-9212-f438f5be456f", "indicator--5956f922-e13f-5a7e-962b-b6d0f2d499b8", "indicator--56a586e2-920f-5244-878c-6685f27aebd5", "indicator--145d5f2f-e312-59ac-85eb-7144c65069e6", "indicator--390b3d5a-0fee-5f7b-9a4e-87e083b0e3ab", "indicator--483c47cf-2e33-5a9b-b8cf-3959e100d49e", "indicator--8489f391-5119-54e4-b79a-1c4fad695970", "indicator--1bfe229f-9656-57a6-bf96-7c53c78d776d", "indicator--4004ac82-6f13-5504-8b3f-0805cc63a58d", "indicator--30384888-d981-5a3b-a864-0bef5c3c22ad", "indicator--2beb4dc7-06d9-5c7f-8570-934e77fc5a4a", "malware--8eebd6d2-26d2-53fd-98c4-6e2b47107a7b", "malware--2ae744cc-d429-562c-b3ff-20af345c49c8", "malware--f6ee4546-0403-5c89-8671-44b5f506e112", "malware--4ceda2b0-9760-5678-bfaf-2a8734d5b5d5", "malware--746b9882-c07c-51b2-8212-17f6322f6694", "malware--c8726cc9-c923-59cc-b02d-ce446203d0c3", "malware--e1d26179-eb32-58ab-ae64-5ee789011668", "malware--054b7e92-0906-511a-80a8-9aaaadcb27c0", "tool--c56f982b-3d7f-5540-91f5-8575d8315c67", "malware--e50e9e2e-408e-52fd-ad9a-7871c902a999", "malware--769543c1-109e-50f5-8c3a-644927b7a39a", "malware--0e46bc43-f867-5e78-b4a7-e99debd37ac5", "malware--0bb072c0-7066-57fc-a6a8-9440023865ae", "malware--4fdc4d8f-282d-51a1-9ab6-33374ee9a59e", "malware--c7d95f55-2a11-5c89-9630-ed6859f64c58", "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "attack-pattern--87b8e72a-5437-59a8-a6a9-16f846415a26", "attack-pattern--c01e5328-9b03-538f-a04d-fb8a4cb83365", "attack-pattern--6214841b-936d-5da2-b5c8-4bed4cf9aee0", "attack-pattern--73364e03-8914-541e-a33c-877b656c37e4", "attack-pattern--99faa775-7366-5b35-9527-17f7643bc506", "attack-pattern--755f0c17-280f-566e-a2da-282903887159", "attack-pattern--d2f1c4d6-c47e-5a04-a3fd-c736a48f01f1", "attack-pattern--ef3ac7d9-a40e-539b-9435-17e7305a5bb8", "attack-pattern--1635f86c-b5b5-5339-b31b-87ce05013408", "attack-pattern--d09ec016-9d07-5880-bbaa-b9dc297f2995", "attack-pattern--07c41816-7934-57a2-a81d-2451f4078e57", "attack-pattern--891cbefe-b5a5-5cf3-be40-bafdf6c9002e", "attack-pattern--3b62145d-1081-5973-8f88-1380946f41e1", "attack-pattern--115d7bc5-0c5a-58b6-9a22-417821aa315c", "attack-pattern--ae605b9d-aec8-5001-87c6-c60e0a234712", "attack-pattern--aa1b4f1f-403a-5f4d-b3a3-4caca0bde047", "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "attack-pattern--cc6d980d-90ed-5d01-8d37-5b0b10b644c7", "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "attack-pattern--49c58dc5-3b72-591c-a289-12ccffeafe16", "attack-pattern--e975ee00-ff63-5f18-9012-3368b53c5972", "attack-pattern--98af924c-f490-5f05-bf09-7873f7f616f0", "attack-pattern--d182bf23-12e2-5b7c-bd1e-1c28cf3ee419", "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "attack-pattern--4f83db55-e9f1-5071-aef3-ab98216b533a", "attack-pattern--ec2e7a68-7972-5b80-91de-cf090587aa59", "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "attack-pattern--c60a7b31-fa83-508a-a125-7b2729edb5c4", "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "attack-pattern--5f44eb71-9380-5f9d-9c56-245d2f120e5b", "attack-pattern--6036def8-6bae-5d6e-b2e5-4e5f8419e3ac", "attack-pattern--7619220b-a9bb-5122-8a7a-4c32bbd87cdf", "infrastructure--dc2c9654-74b8-5ccc-8764-590aa3403881", "relationship--8c5a90ca-4b8a-5b8a-9896-61bb15c278b8", "relationship--aba3454e-5d6e-5971-867a-e3a0f359089e", "relationship--5b60592f-305b-52cf-b100-757a2e3e4d95", "relationship--97f1eb0d-513a-5a37-9d18-1c44d0184bd1", "relationship--b4f88d1d-4abb-584c-9fc4-5ecb9ca899e7", "relationship--7883ef39-2afd-5e05-91e3-0b75c58a8406", "relationship--e95b2043-9589-53e8-882f-f7c8fc84ac15", "relationship--876f809c-7eab-570a-9647-de9752d12720", "relationship--ba8855c8-70b4-5df7-9fbb-3081b5aa88b1", "relationship--46a15906-4e2c-5757-8b97-490391b65ea4", "relationship--d4340f3a-9b4d-506f-a02a-162bb74c9cb6", "relationship--d8af53c0-1bb8-51f1-b116-934945246a01", "relationship--9143cef0-0c95-55fc-977a-edaaf1a5c2ed", "relationship--204398ff-ae7f-574d-bc60-96f0e9e29c33", "relationship--dee9a6d7-a791-5860-b6ae-c1158e01366c", "relationship--91836ae6-104f-5381-9c2c-72b8e6fea6f9", "relationship--02b63a81-72df-5361-91aa-b6910223bc79", "relationship--e796f268-5aef-57cd-961b-4b7c1e73af14", "relationship--eb878978-5157-588f-b2c6-0e5f5dcb2117", "relationship--3355dced-fa28-5e46-b82e-242a8a9e5bd6", "relationship--0b61059c-59cc-5256-ad41-9d667f53be56", "relationship--7579b8be-edea-5930-8435-a273c1735dd4", "relationship--5430fe18-46ee-5dba-93fb-f1fac29177e7", "relationship--bc1bc7e1-91bb-5e96-88f2-4ed6833d8d0d", "relationship--815bcf6b-9e05-51c4-b5a6-137f4ed5a9b7", "relationship--9b70f04c-a07e-5a22-99c8-b19b620ddf43", "relationship--059feb7c-f244-5ff4-8f4b-0138d750fd2c", "relationship--d85d3fb8-3217-59c1-87a3-cbfdb47d21e6", "relationship--1c0a2806-3d28-59c4-abf8-e88e4edbb660", "relationship--f5bc7cf4-e58b-55e1-9185-8b5a03740f4f", "relationship--0e12f0c8-559f-515b-a226-32b0466e3c34", "relationship--acab6f37-673c-5d39-8c85-a8dd33b64e0a", "relationship--64528fca-7739-5478-975c-2e3b1200b707", "relationship--fc867033-7908-527e-ac05-48ba5107a2fc", "relationship--cc8b302e-2f23-5196-800e-572a0ca40310", "relationship--5cc2e8f8-ae53-5861-8351-6f0a18260994", "relationship--f7068553-e521-519a-9fed-24cc3b6d2d98", "relationship--83a7cfba-4c6f-5b37-9221-07ce8dbef3fd", "relationship--e3482394-0531-5cf8-b6ba-19b035676820", "relationship--cd1b0ee5-e67d-5204-8369-563ba15157fb", "relationship--f75c494e-c1fb-5774-aa02-0465d2d94dab", "relationship--4b43eb00-7033-5719-be45-097407cb420e", "relationship--a1c8538d-49df-5647-8463-fdea84ad28bb", "relationship--1682d665-6069-5278-86cd-fd33ec29f33f", "relationship--312c3b2b-cbdf-5e5a-9ab0-6ec78333c340", "relationship--697c58a5-b5f5-5b89-b658-73cb6d00e490", "relationship--633c1fe1-bbad-55b4-8d3f-5442b5d4fbdb", "relationship--5e70bae7-6700-5e7a-8ef1-9b62953cc0bb", "relationship--a7e58667-5b19-58a5-808a-3272ab9aa4a8", "relationship--b1136b0e-f692-501c-8ee8-8655ee19d8e5", "relationship--323a8fed-8301-541b-8e57-cca65dcbe680", "relationship--7e3d060a-6dd7-5dbc-a933-be9cd44d1bd3", "relationship--41040516-e978-5967-a5b6-0d0d930b4ea4", "relationship--000e6520-a77b-5fdf-9fc0-38889e70d83b", "relationship--ebf236f3-9cf3-5757-afb6-c4ab7652aa54", "relationship--3203b5ce-7f1f-5acc-8989-31dbc3f069c5", "relationship--9d19763e-e274-5fd1-9ec2-cd112b87dc26", "relationship--63edcfdb-1ec3-5016-887d-6e99c7e7a4a9", "relationship--7a70f6cd-3665-5399-8fc6-cea0ac06bbfa", "relationship--0299d816-db5f-53ff-b1b0-7731527e45d9", "relationship--4d44ed1b-d183-5909-95df-b243dcd63aed", "relationship--4c1fe9e2-9858-5b6a-805d-b4b92f866c03", "relationship--529949b0-a0da-571c-af16-3d73bbe177c1", "relationship--c2127a3c-ff61-5871-a77d-bbdce2572032", "relationship--f5283fdb-86c1-5b42-997f-21bd2e04ec16", "relationship--c6e92812-48d8-50e9-97f1-039296ea7674", "relationship--aa04269b-6fb1-5110-83f1-e88ff2ad4a28", "relationship--45bc8406-c1ec-5a17-8255-e7f3c28069e9", "relationship--e6706ac8-efb8-552c-8dc2-4f4620e646c2", "relationship--ed0c2b3f-e429-5dd5-be16-861bdd79446d", "relationship--afd7b728-6702-58c1-8cc7-3b12d4d299c0", "relationship--36dfca65-6069-591b-87ef-ada639ef693a", "relationship--d3d12449-dbd1-5000-916a-70497eb3692a", "relationship--7e072a51-db3a-5c1c-9239-5ed7e000459c", "relationship--f0d1853d-fbb2-59be-9b2b-5f513d17d4e0", "relationship--97dc3e58-2f5a-5559-9cea-52859523cafa", "relationship--280451ba-0e4f-5f44-8056-9be4b493e6e5", "relationship--efb67884-6e42-577a-af5b-28556530e2fe", "relationship--10c21099-bb92-516f-9080-1e592450e42e", "relationship--ed9da21b-30ed-540f-8662-89657e2ed624", "relationship--736787e3-4933-551f-bc78-3ce3244c63e0", "relationship--8ab6a923-d674-5b7e-8429-cb1b81c7e361", "relationship--d789d28f-6faa-53b3-b86a-2ced915338d3", "relationship--c9a91137-b73e-5e89-bce0-6e9fc79233a7", "relationship--0a4f72c2-2c8e-570a-8f4b-a472c9879757", "relationship--1766f277-a8f2-5030-8c87-fdcf28a9dd73", "relationship--31d0a778-8634-5af4-b7e9-ef285e7f59dc", "relationship--3746e35d-3364-5ec4-af1b-2561708b2387", "relationship--acf47b5b-c8de-5b3c-bac0-0fb9952e2a50", "relationship--de1b37b0-308f-56d0-964d-9b6f6a83f240", "relationship--0f00b828-0a0c-5a17-bddb-ec9f16d1d78d", "relationship--1e47d003-1772-558b-b0a8-1fadcdd32cf3", "relationship--64a25e6e-413c-5315-9cf1-72f1745537b6", "relationship--6880da3b-0a57-5ab3-9337-ca1da13b2c61", "relationship--32d5703f-e5aa-503b-a8d3-623149aa7a04", "relationship--945341e6-cb7f-5e01-b0be-a58cc4194a20", "relationship--a5568200-511e-59df-bbc9-e013b63b7d2b", "relationship--21ec29cc-5dd3-5274-9118-9a992135cdd5", "relationship--d2e30075-5e3f-5bfa-85d6-80c10102886b", "relationship--53c0cc5c-fa43-557e-af57-500f4a3852b5", "relationship--488c3369-dcd5-5c0d-9d93-fe4e71b632f2", "relationship--1354826e-1e88-5a6c-bef2-4cff55fe85ad", "relationship--1ce8b365-c7ed-5d42-bc8a-8d9eab1deaec", "relationship--d2731416-b563-5970-af3d-9638c78a90cf", "relationship--5b2bc95b-1bbb-5846-a917-5913bd166b0d", "relationship--bc768be6-5d8a-5157-8394-713ef6561de4", "relationship--0e92d14e-7c4e-5d1a-985e-75963d832e13", "relationship--09e75b47-4ff9-5d1d-a3ec-299f2acc545b", "relationship--28da6d8e-87f7-530f-9ee9-5c114234f63c", "relationship--e4accc18-61dd-52a0-b24f-5af39d473ed2", "relationship--afab779f-05d3-5cec-b0b3-655e5ec38ced", "relationship--9b632b1c-03ea-57d8-b824-29b65b0b2f33", "relationship--69a483b5-27e1-54f4-a91c-c34ba1b7bdda", "relationship--b3fd0de2-8049-5395-9b7f-65a86619a58e", "relationship--aabaf056-e44a-5f4f-88cf-fa1e9a74876e", "relationship--c31b64ec-db94-55a6-ad3f-dc5b4f0d6223", "relationship--b3e4e6a6-3213-543e-8b33-9a2f8ebf53ec", "relationship--1136cfc4-2e25-5fec-a51d-b2f35eeb629d", "relationship--d6eecff0-1e89-546c-a4d5-6f38b219d848", "relationship--52ba1f13-fc15-588d-b1f3-d53d9afca145", "relationship--597ecb40-640f-5ca3-b78d-eed35209c39f", "relationship--a134205f-991b-5153-b882-c122a2393da6", "relationship--4646731b-2faa-575a-9859-d68a4ce66226", "relationship--c0e86ed9-c51b-5a85-b2d4-793fdba23841", "relationship--10ab433b-0fee-51ea-891e-b82ada3396c4", "relationship--9125ce98-7d59-5178-b344-38297313cf21", "relationship--6cbcb64e-5781-5b23-a626-57cec17df6e2", "relationship--bf2fd3f4-9fb1-5543-9c2a-acbbbb1bb8b2", "relationship--f100902f-0f06-5c65-9332-8f9cb1845af5", "relationship--b39beb79-a4c1-5b27-866f-bd746c793bb7", "relationship--995118f4-3904-5df6-ad2d-937a972e1dfb", "relationship--b528c94f-53e4-5aa1-b617-c8339783ad44", "relationship--b11628c0-2873-539e-84ac-23a499741a2e", "relationship--58c6a850-6242-5fa0-bae9-a44e21b084b1", "relationship--92cd53da-652b-5d6c-9574-1eb966c8d870", "relationship--1ba7c792-6f76-5d4c-af9d-4e41659308f5", "relationship--65ca5aa3-aefc-54d2-ae68-e1d910512d13", "relationship--3290dd08-510b-5eb6-80f6-485e2e5673e8", "relationship--2db1a2f9-cc96-5228-8759-57d5b99a0995", "relationship--daedccec-40ee-51ee-bbde-7ca9394984fe", "relationship--dee84149-597f-5795-b29a-61904a67b644", "relationship--14e2bd9b-510c-54ca-9106-91b7145aa211", "relationship--6dfde421-25fd-5ae7-bf31-e447b7d9ddf8", "relationship--47def7c6-6137-5dca-a589-074f9c01634c", "relationship--b273c127-545a-50fe-a217-720d39f1d7d5", "relationship--3b624783-26ff-56f4-b716-a74619197d5e", "relationship--ab9ced35-f57c-5e1b-be70-0341cc62b48d", "relationship--cbcc1a8f-a5a7-5232-938c-4d447e41175f", "relationship--d5af89f1-338f-595e-8ff0-3f68bc71a112", "relationship--b60e550c-8a38-567a-97cb-209b709f112d", "relationship--00f51a10-ba66-5e82-84e8-d65d6888684b", "relationship--c47d00a8-2cde-5f10-8414-fcad8ebc9d9a", "relationship--5d03f823-b60c-53d8-93c4-3108641a6503", "relationship--18478ca6-7784-51e2-9896-04eae007c0a7", "relationship--2782a63e-ced1-50c2-bba9-7e6acd432898", "relationship--3968a3c1-4df5-5ba7-b5b8-9bbc046d9aa6", "relationship--955c7496-ea7a-5958-a665-d6a0552d40b9", "relationship--fcaa704c-767c-5732-b49e-dd0e97b702a8", "relationship--f0d6ce95-46db-5bc7-bba3-c555a4e38d45", "relationship--9104a4b5-fcd6-5c2b-a98e-3d4f0b66b98f", "relationship--c6484691-5ddb-59ee-ac44-a8f72cdd9730", "relationship--3f223617-ba30-5905-8a19-b3589eee7241", "relationship--92ebe8f7-b432-5a95-8579-5f701a72de3e", "relationship--dec4254c-9f95-54f7-b607-0a74e5442d86", "relationship--e4141473-2e92-5a95-84a6-6215a816d1fb", "relationship--e5965372-a1bc-51e7-833d-200dfdbe1b1b", "relationship--593f6067-f5cc-515d-8f61-7fa7613b2a9d", "relationship--fcec838d-4997-5a7f-8c29-81d93c6e24a7", "relationship--b668a04e-14be-5119-abe8-36e4a00ce53a", "relationship--a3a185c4-2ba5-561c-b34a-95b2f83dffbd", "relationship--90182c46-29c5-5221-9dc5-2f7a75c2b524", "relationship--18dda5fc-4976-5839-8dd9-faf58eaf267c", "relationship--fc216689-7479-55ad-a7ea-5c5d4d3497e1", "relationship--4c564ba8-9f6e-51c8-bab2-ebc9c79b4c13", "relationship--dcc3f39b-c306-5aed-9daf-ef9337b2aee8", "relationship--2ea35854-2ba7-5133-a6c4-011288eef98c", "relationship--ea6dac8a-c584-581b-bde8-24515a2e94fe", "relationship--fb26e67e-ff1a-566f-9462-662814f7112d", "relationship--85b67d72-aa2f-524d-b3a6-d4140be62aaf", "relationship--f35d5d18-7805-5ad4-b39c-b4583b64dab5", "relationship--1e29b0c2-4b6a-5f1d-a903-5cf696ad61b9", "relationship--d35492f4-8002-5069-80b5-2bfa9cb3a200", "relationship--5d6e86c7-0a0c-51c4-bff6-4daaaabdeb1c", "relationship--60051a49-3666-595e-9e46-6c9dbd2f9e8e", "relationship--09cf84fe-41ba-5286-8088-b1a1370ec54d", "relationship--7aec2a05-0518-5eb7-b15e-8497a54d8396", "relationship--fd689333-1f23-5818-8f8a-db65767d8419", "relationship--ff65a628-433f-5484-b6e7-7218220bd2b2", "relationship--e1f12dbe-ab37-519f-a413-01a615257043", "relationship--1d2b2f0e-d413-5605-9324-7c6dadc278fd", "relationship--bcc876d5-7f15-553e-bdb3-c7a655433601", "relationship--fa8b9b74-5627-50f9-8178-2f5f75670c16", "relationship--202b82c5-416c-5052-b5f1-35b6a53ed6cf", "relationship--2fd30e22-a858-52a5-af2e-8ad8a7355b45", "relationship--2f1afafd-a6f4-5304-afa4-43c9985cfd96", "relationship--b1afb0a6-5b8e-5486-b272-74a14a7d2fd8", "relationship--7d4a2870-ea80-5893-8b67-d888804d4ddd", "relationship--48201109-92ef-508b-b6c4-5a210e370752", "relationship--7bd6f2e9-ec2a-5027-9bf3-b527b241bfdb", "relationship--49f84458-fa9e-5a5e-a9b7-e35439401dce", "relationship--650dcd78-3a52-5b00-af6b-6b8cf2b40764", "relationship--aa202e8c-b74f-5c69-be8a-cb215b119690", "relationship--323de175-4217-57e1-84f3-346c8f5239a9", "relationship--3270b226-91d1-5e27-bff8-e80d7035ae2f", "relationship--fa06207e-b08e-5e57-a32d-5089484a719c", "relationship--07c23b8a-9033-509d-bf57-49238c773bb1", "relationship--5c366da2-7457-5c03-882c-6adb7ac78449", "relationship--581fc19f-c40d-5a9d-9518-28b3be589629", "relationship--1c2e5f3b-5529-583d-a5d8-100169eb91bc", "relationship--d9106b0e-4dbe-5c43-b320-f4c577dd37f0", "relationship--e3cde425-aaaf-5108-8394-3ad8cbf8b70b", "relationship--7c464c22-3a7e-5b5e-a878-7fc4231e1145", "relationship--dcb6c876-8ed5-55f0-9e9f-a9b18f45487a", "relationship--31b60644-aa5a-5f0f-8cf7-1e2606f65997", "relationship--973e6356-63c8-5160-ba37-d213759504e6", "relationship--c1d8b008-24c1-533f-9d45-1000eaf28d3e", "relationship--d8f3f927-7621-50d1-8d0f-0bc3c13f7d57", "relationship--6fc46d2c-229e-5444-a91e-261e096a7bbd", "relationship--4cfe29c7-15a4-5bbd-88b0-29aca5927482", "relationship--02ad8d51-0e5e-5ce4-a858-97cd998f0851", "relationship--6e3208e3-8a8a-572a-9ca5-7e74612bb930", "relationship--50cca3df-1e06-5c4d-a0e4-228ff1bfaa40", "relationship--f0aa55a4-f6fc-54e8-aa60-5c675c6db017", "relationship--74b4ebee-11cb-5e09-afd1-be9dc8cf82dd", "relationship--a3e03b4a-0174-53ef-b7cf-1a5054962a2e", "relationship--e4dcc14d-1ad5-5a9d-b561-dc87b9ef47db", "relationship--0a61db77-4876-593d-9461-344550312562", "relationship--9a010298-3842-5f8f-89ab-acb7798a849a", "relationship--5ce6a520-fbc3-5451-b5cf-83decb9026ba", "relationship--f9599bb0-69fd-55e6-8918-d911bb92ff26", "relationship--8942c9eb-cd8f-5c17-8851-87dc4eda596d", "relationship--47aad43e-f04c-53a7-af65-e2d913f0ac80", "relationship--ec634be1-a820-56f5-af60-12294ea20a07", "relationship--cabde7ae-69ff-5017-8429-ef58f602c0a7", "relationship--168d6276-f812-5e3b-b247-e6b6633ba558", "relationship--576faf64-87de-5009-90bd-c27917f68ca5", "relationship--df781d69-5e52-5073-bfe3-6e22a7de11ad", "relationship--c860ffac-3b5d-5f99-a3fe-fa720233a194", "relationship--936c5da7-6775-56d1-a44b-1a0eee5bb50f", "relationship--dadf5693-1de6-52ec-a793-16f259fad226", "relationship--087548dd-96b9-50a1-8927-4de4c59cefc2", "relationship--8af5c79a-77aa-58be-8e25-05d8d41ef338", "relationship--32b4522f-2c3d-590e-bdf8-61eabd9bf455", "relationship--6fe2373c-6b5d-5493-b322-a7dd9fd57e12", "relationship--949fb67f-9a55-59d6-89f6-abef96f4f4e2", "relationship--3cbddd4f-52bc-521c-838c-ca3fe189f0e9", "relationship--78e69769-8da6-557f-bb7f-613b544ab61d", "relationship--f8fd29e5-2042-5b2a-b518-25448f11f824", "relationship--79871aa2-0e50-53a5-bcc8-bc9bc8bfe56b", "relationship--90fb3596-99ad-5cee-aa84-c60dbc16536b", "relationship--bc19bcfd-f5d9-57e4-b6b8-679b2274b652", "relationship--e2357d84-6516-5c0f-8e45-54104fc2e376", "relationship--144e4246-b540-5135-ad3a-ff9e9d0131a3", "relationship--5322ce99-54f8-5d37-b244-1170f195514e", "relationship--ee1ebf04-c6ff-5afd-986f-bc3558c94872", "relationship--d68cdfef-4b22-547a-87d1-a38588e71989", "relationship--f2fc374b-1938-5993-b125-2d6297ff3661", "relationship--ec32b477-df4b-59b0-a6b7-986fcd45541a", "relationship--be086320-f131-5cfe-9819-ca0c82c4e1ba", "relationship--82e97b90-8357-5088-b40b-32356165c20d", "relationship--5edcf862-325a-5261-aa30-2b90f486d4d8", "relationship--604bdd59-d5ab-5fa9-b433-fffc48d634e3", "relationship--6624ce40-e819-5b5e-b416-98f067ef0166", "relationship--e0fec190-0697-502d-8f67-95d0827184d2", "relationship--572fcd23-68a2-5ffc-b640-b3d954d0d19c", "relationship--17850287-1d68-5d3d-ae72-8eb574be22fd", "relationship--294e820d-d030-5b32-92fc-490cab605fcd", "relationship--e19fd08a-8035-52ab-b7b8-5f59d23be889", "relationship--c3c712f6-6a23-5391-b37e-b81d239eed91", "relationship--2001aa1d-7cad-5191-b711-ab68f0256f81", "relationship--c222f4e6-06fa-5bb6-9f56-156f027d0c5a", "relationship--555829b5-5d6d-5889-891d-75db8c10fdc7", "relationship--f05a14a7-8733-5798-972c-91ce11e88982", "relationship--06820f7d-ed87-56d4-aa41-792e1b88c07b", "relationship--91e54f9f-355b-564e-89bb-78030012ba24", "relationship--73885385-c1f9-5ddf-8f71-f06c3f7f630b", "relationship--72c8e875-d574-55dd-bdb6-98d2caf8ac87", "relationship--fe8d7440-1922-5961-9e4b-5dcc37e92c4e", "relationship--b1c052d0-8367-5cff-8a67-63c92b117373", "relationship--fabfdbe7-35e5-58e5-a8e8-35586476f1fd", "relationship--3df40ce5-12ee-5d39-bfa6-7ae3c24fa88b", "relationship--975e0156-06f4-5da7-b8d6-04729d14843f", "relationship--e88ea0d3-b3b3-5d80-855b-c8cecfd3b18f", "relationship--73a873f4-9c56-5b57-9f18-f9d500906469", "relationship--bc891c8d-6499-58db-85b7-321e4f3dc0b7", "relationship--adfeb6f0-4e5c-5cdd-9554-96d245b12f62", "relationship--9c4147e8-6c94-5a51-a5ac-4a446dd2fb15", "relationship--2b63bac8-2ec2-5236-90e1-1b1326b3965a", "relationship--ac887039-ee68-588e-87a1-2c2c5304be4d", "relationship--272699aa-6172-583c-a8e9-120bd678515b", "relationship--8fc75895-29fc-547b-9a67-dda08b776c91", "relationship--649f7b18-8bf6-5791-8cd0-07a52be65143", "relationship--7dd58f0f-c23a-55a2-94a8-0003165fd516", "relationship--770693c7-d96b-5672-afe2-f392dea6b110", "relationship--fec6b6c8-ca7a-5afe-bea5-3fbee772ce90", "relationship--59c08785-a2d2-5bbd-bf6c-61063adacdf8", "relationship--c65df877-8609-5514-adb7-828baa611361", "relationship--b419d71b-11b1-56ea-b39d-b1e4a93706bb", "relationship--7be983e3-6069-588b-b990-c52b38c6ccf4", "relationship--3734dd6d-3a70-5b33-a9e6-d5848677e6fb", "relationship--de9ae70a-90df-5c63-a244-d3c30f05d629", "relationship--843fb8c9-611f-5c08-ad2b-8826e9c4cc7c", "relationship--eb005ddd-73a3-52a4-977c-a0c996f53ac9", "relationship--48f5a633-7c19-5c78-98c6-236324c61b96", "relationship--01aff6b7-04e7-5326-946c-b413f6b056e7", "relationship--da082c11-48ac-5c3f-a970-ea910c44a462", "relationship--5550526e-baec-5539-832f-a65febf5c561", "relationship--c350a7f4-dc72-5e19-b201-e359429072ca", "relationship--f6d66912-59bf-5377-8559-e32f21e9315b", "relationship--34e23f1a-6ffe-5870-b1ff-a855f64f7659", "relationship--0318cf51-3409-571e-b983-e087abf7dade", "relationship--371ab67d-4373-596c-a238-2b0a5ddcb816", "relationship--cbec2581-3c7d-5dbb-b739-e37c07d91d15", "relationship--e3f914a2-38cb-5e3c-8329-abe447ed6000", "relationship--5cc83176-62a6-5753-87e5-64ee723f8634", "relationship--5e9eff53-54d6-5617-9a4d-30a3f3e06847", "relationship--b61913cb-eb98-5329-8aa9-204845137021", "relationship--d50cf1e5-66a3-5bb1-a635-3c299f563759", "relationship--08acc5f6-cfa8-5419-b002-83bb71d18724", "relationship--37913099-19fe-5cfa-86f4-780aae05cc91", "relationship--68532b26-708f-5218-b357-6a7eb83b3d51", "relationship--88844c4e-92c0-54a2-94d0-0358f33f7219", "relationship--50d9e6ed-2f3b-5032-8287-9b8e6c9b724f", "relationship--ca5d276e-45a0-591f-b29c-5b35018fb052", "relationship--7525f0e8-d2d7-5077-8e82-ccbd4679306e", "relationship--235aa10b-b4f2-530b-9d8e-7fadcd01117a", "relationship--47797fa9-5747-5a5a-b01f-069dff4f0cbc", "relationship--18b29b03-7a47-590a-abfd-1a38051e600e", "relationship--e2f2f8c0-1c90-5b18-aeee-a102a4516ceb", "relationship--55a39792-555c-5c65-a332-faa795290c04", "relationship--1abe4260-bd40-5cc3-9cff-aebb273db545", "relationship--bbd67fe5-5493-5891-8b79-1c0d32d947c4", "relationship--ca24b97d-d5b7-5ae9-86e2-45d11b9227fa", "relationship--b2b0898f-0157-58e5-8bc4-ae8f54f1cfa2", "relationship--49b083c8-3e0a-52d9-b5c0-de910e630f36", "relationship--5bbb5b7f-0e96-5217-8b12-b8b081ec819e", "relationship--7e128330-56ab-51b0-a2b7-618bcae329be", "relationship--2233e2a2-3b64-5118-aa50-dd6cf85256fb", "relationship--cee27a48-9ca4-5dba-905f-b849b21f1099", "relationship--a96c8687-7efa-5414-be14-8f27c7c8b25d", "relationship--946fd93d-5c3d-51b5-8a1a-ed0b945ff58c", "relationship--d20a7d94-9e94-58cd-92e2-a88969bf8d81", "relationship--bec86933-f0bc-5325-8c72-6e806029ae0a", "relationship--13fd6f93-e992-5fc5-ba73-d946ebf2b23e", "relationship--4974ce2f-dae9-5dfe-9c58-892fb69e8ad2", "relationship--c91b2ead-43a1-5fd0-bfd0-94b16c135c8f", "relationship--48287bbd-87c9-5e79-a967-307c5ef175e0", "relationship--9b7526af-10ce-5052-9810-498cca1ef4d3", "relationship--2cf185e8-0f1d-5e3b-980d-9e13f9cd7771", "relationship--b36537c4-5486-5be0-82b4-609d3f0f78bc", "relationship--e0057b74-3276-5522-be3a-2f41d513782c", "relationship--864bc1e5-3f01-5ad6-86c4-6d21b7d294bc", "relationship--0791fc95-56e4-5445-a889-849e2863d537", "relationship--869b8cd8-d486-5840-9116-6b216d9b2703", "relationship--64576abf-e657-5464-a32c-fcb498cb3953", "relationship--1d0298ae-4a66-5598-9b54-14bdbc98bcb6", "relationship--15d1ddee-af46-5925-bc46-2b83c6117737", "relationship--3f4f8367-d3a1-5298-81a5-d7f068e998cb", "relationship--6af3bb0f-cf4b-5457-af32-a6364f94ad49", "relationship--d6a00084-22b4-55fd-aadc-ad31ea301bf6", "relationship--b0c5e85c-3b5c-5586-8135-7e371ef3973f", "relationship--13668a24-d044-5d86-a055-1d2574f3c592", "relationship--23ac6f91-8b73-57f7-8586-073b0ec34f0e", "relationship--9f9af60f-a685-56ce-abcf-59904fd56640", "relationship--2c0f5229-0407-559a-841d-50f0033083de", "relationship--84509407-3d63-5a04-96b3-805f2c53c01b", "relationship--48b9c333-db21-5a3c-886b-45995b31d57f", "relationship--3317a11a-e89a-5cca-a427-60fdb3982cce", "relationship--7c5aa696-5d01-55cc-931a-30cb4b85963f", "relationship--5412de4d-58dc-59f6-a5d2-98a016031124", "relationship--a0be9735-bc91-5a7d-8bf5-32f30d4a9ab1", "relationship--1eade736-b54c-51e0-8bf1-42be95663689", "relationship--c19a7c74-5896-57be-83b1-a688bdd56718", "relationship--5dbd7585-85d2-5810-a3aa-09d3affd4f82", "relationship--8033d822-0d64-573d-990b-665845c116c7", "relationship--62d664bc-e1c8-54d5-93d3-a7fa0b8d1cc6", "relationship--c2a3eb5a-cc9a-534a-b2f8-5cce03b3661e", "relationship--1be38997-5804-5ba8-9907-3a7fbf69e3a0", "relationship--d4d23ead-7d10-53e7-8a1c-bc36f5b5bee7", "relationship--c9942ae1-7b8c-51c8-9bcc-60718cba045b", "relationship--bb9e9a8e-4856-5411-85bd-40300db2dd62", "relationship--0fa7bf77-4cc6-5edf-b964-ecfd2e5595cd", "relationship--512cf649-58be-5823-bed4-4a04f1e468b2", "relationship--4cb3f716-94ee-5e03-a8cc-a27ebddd2623", "relationship--8e87863d-bbcf-571c-bb26-4d444f7c451f", "relationship--565ee435-a068-5d60-acf0-5f525ce3a501", "relationship--8c34b304-e532-54e5-9899-9e52de2045e6", "relationship--58251c99-a3e1-586a-a92a-649302c51e29", "relationship--fd24d243-0d46-5653-8289-739206ef7489", "relationship--d72a659f-aa94-5d54-83d2-adcec959b763", "relationship--97722bfd-c663-57a8-83cb-538d69062c88", "relationship--285437f5-f672-5da1-86d5-6918cf5cb369", "relationship--841225a3-6376-550a-b216-339df99cd7d1", "relationship--c4fcaec5-d332-591a-ba9d-1b03b71d92fa", "relationship--4a54cb94-9cd5-5040-abdc-6285686deb5c", "relationship--24066619-f7de-5502-b4bc-644bff80d61e", "relationship--922eec99-be97-5b94-9382-e608c761254b", "relationship--359b5614-c088-57ae-aef7-47eccf97b34c", "relationship--576d7247-6dd4-5794-a230-72f0f1660b25", "relationship--ddf7a79f-a9d0-50a0-b562-2b9e16a28be6", "relationship--ec568770-bdb5-5744-a904-821b55a6e240", "relationship--f6902c20-3cf4-5be9-82ae-3851121bdc6c", "relationship--75dc0f18-96dc-5900-bf39-36e94298a66c", "relationship--e691f130-ce44-5e4a-af58-8d9854c40f73", "relationship--817090c1-95b6-59fd-90c9-fbaa35193add", "relationship--6da619fe-6511-52c6-b480-fdef35827738", "relationship--699c5b3c-fc44-5227-b3f1-1a9a20ee1932", "relationship--1633fe8a-2ba2-5084-8707-8c110d02eade", "relationship--2f7a8b43-6953-5fcf-8726-1c1cd00820fc", "relationship--d2e8cf6d-ea50-5fe0-b4ef-aa0b2e6014ee", "relationship--50f37172-9da5-52d4-96dd-a6b93fd8e9f2", "relationship--61695452-7e60-5d5c-a5ed-2bcc745e762c", "relationship--260be228-0129-5f9b-a94e-c10825c6f388", "relationship--f9a6feea-1c7b-56d8-84cc-6bd6fbc96049", "relationship--1a5d4784-c8e1-5a17-96e5-acc0ea6d6c2a", "relationship--816a9a90-f0c0-5348-8952-4bc5d1f4ac5c", "relationship--a59eaada-88ce-5234-8809-058e99ad5659", "relationship--1e18a8f5-04ba-520b-8a83-d70abef14135", "relationship--79f2e911-b3fe-5a01-8bd6-99d2fc221f87", "relationship--c403f4dd-d728-5786-921e-0305f6a0d02e", "relationship--164561aa-8586-52db-9da1-20b8f87148fd", "relationship--cf429da7-9934-57d3-b3ba-25a4062f1b0b", "relationship--ca929b44-f7fa-56a7-b485-e59f0d8a82c3", "relationship--fa725def-45a2-5e23-90bf-588cf5491bd1", "relationship--b41ae52b-4cde-5ad6-80ac-e84675ebeedc", "relationship--f9736aa2-88d4-5da9-94a0-00a1ebc24439", "relationship--eb260b2e-6d15-5941-bd7b-51bd227d19cb", "relationship--dce9a242-915e-5dac-950c-4bccc99dc0e3", "relationship--b266df4e-50aa-530e-83d0-22c8b0740fb7", "relationship--cc9129a0-28bd-5ec6-98f2-ead89ebf345d", "relationship--c68bd546-be05-5c21-a84d-25f117fa966a", "relationship--d8abba56-2670-55a5-ae4d-e8f4cf70d170", "relationship--f57a89f3-8b3e-5788-b1df-77aa0115c37a", "relationship--17ea6306-d31a-51f4-b471-cbb761387553", "relationship--b118382f-3c9d-5dfb-b05a-9e6f585767b6", "relationship--e41f78e5-e2c6-5fe7-a7f3-6ee42305118e", "relationship--1bffc7ef-6062-589f-94d3-f5162e70a6d1", "relationship--917366c8-04eb-5966-b33c-c0f9f90220fe", "relationship--0edf86fa-6c33-563c-b44f-2855cc0c3bda", "relationship--606dfaf8-0048-5172-ad38-42825605994b", "relationship--998b61ff-bb66-52a6-8890-19db5702abc9", "relationship--38bda41f-f26f-5abd-b9d8-c275e3b03ca1", "relationship--3afedd08-6e8c-5b21-83bc-39a5726168a5", "relationship--f33f441c-80eb-550e-87cb-264d252c8701", "relationship--8f27cdb0-6629-572d-b3b1-d009854d8fcc", "relationship--718ecb3e-cfe2-54d7-9284-d1f973b64023", "relationship--65e78946-f31e-5e5a-bd78-59ad4d6a68f1", "relationship--5a5c91c1-e3c4-56c4-80da-7aed72ea638a", "relationship--14e4f738-a592-53d0-ae7c-3ebf4d53df9d", "relationship--700ac56c-98cc-587c-8cd4-d3f13ecf190b", "relationship--2e284984-436c-59f6-bf45-52ab54671d9a", "relationship--516e85a9-2a26-5df3-8fcd-73ef2d32d0bf", "relationship--ee7215f3-7d4c-596a-a244-fe6ec50ba7f0", "relationship--0cc36883-8ee6-532e-a96b-fcc3bb5bc354", "relationship--8655f635-2b64-5c0e-85a2-ff0dc98defb8", "relationship--21027593-add7-53d9-aa9d-22577137b8f4", "relationship--6d1a9d77-91ec-58cd-b2d1-f3d43a50b45a", "relationship--0e0c23d9-a356-5eaf-8219-7db10c882870", "relationship--c296c5fa-2419-556a-87f4-cd956c4856e1", "relationship--939d8ed8-41d9-5ef1-b560-e87cd63b7c70", "relationship--e865d8fd-609e-579d-be17-563e79b28962", "relationship--283bd16c-3d95-54fa-b983-0fa41d314dd2", "relationship--2f2af185-2584-595a-9c03-da8ce07a32a9", "relationship--00180e51-1ec4-524a-9db1-3dbde615c03e", "relationship--94bb4ebc-ec35-5dd9-97d1-aa0bc7936620", "relationship--6b14ad00-5812-5f96-b64c-f2ebd537315a", "relationship--47d472f9-2894-5b1c-baaa-233dbdae54da", "relationship--04e8cc11-bb8b-5466-8d9b-b44eb08cc0bb", "relationship--cdc1280d-bdf4-5e20-abcb-3af4a676d992", "relationship--1bcc0c99-9961-58dc-9f4a-274deaa58c0e", "relationship--20a87817-2fae-5119-a837-b4d80e74e5c8", "relationship--0cfe00d0-7af4-5dc6-8586-4984a956a544", "relationship--4a34f757-9d57-571b-ab24-1c361343ca30", "relationship--bfcea76f-9a61-5d9f-8edd-7ee2b759c8ec", "relationship--b9f06e0f-002b-562c-baff-5f73f2468ed3", "relationship--435974a2-f08f-5c28-8a8f-e57be15f5b5b", "relationship--f8e5b146-b87b-542c-a376-3971cd70c394", "relationship--6a7a322d-f180-509c-9925-b2f7e2f54cf0", "relationship--f3176dab-1e17-5abd-92ae-3fee63730c11", "relationship--d64eb4f0-4fbd-51f3-aee0-b91e4ee0deb6", "relationship--a8d09c91-c335-5cb2-b971-221cdc53cc80", "relationship--a3389ca8-294b-5b3f-af66-4ae005015753", "relationship--4620be8d-d5ce-5c18-89bc-93e7a54a5b9c", "relationship--dc9d104e-3f66-597c-9af3-352703ac1b69", "relationship--8e253fdf-2c8d-5fdb-9ef0-29d6b334ffce", "relationship--9b956075-ecbd-52d8-9770-ac2ce63fa314", "relationship--a1345c0e-ab00-5d70-8f9d-f757348f326d", "relationship--f972b29e-ca45-5567-a41c-3d64327d93ac", "relationship--918c1482-155c-5cb0-bf3f-bceb58da06fa", "relationship--6b316427-db0d-57b2-ac33-a09308a03d9a", "relationship--ae63f6e3-c74f-5c3c-b410-4933dfe87bcf", "relationship--282d67c4-688d-56e0-808d-0f320cd4be3b", "relationship--7fd9e7a0-24d2-548a-82ff-d70d7bf9fc11", "relationship--8eebb1a8-f68b-5d7c-acab-0dfa667eef7c", "relationship--4120c398-c0ce-53e5-9432-adf4073523a3", "relationship--48140511-ce2d-545b-aaec-2f6bd4603d77", "relationship--2bd1f726-7175-56c8-ba13-8a3ac4e6167e", "relationship--829ebd2c-acb3-5b71-aeb9-3f3e5fae5d7a", "relationship--edc10bbe-5860-5c13-9dc1-befd2fef6785", "relationship--b8a33139-bb55-5af1-8f46-6435e136ce6b", "relationship--8af0377a-0bb2-5483-8ac8-8656c4588430", "relationship--752a9126-22c6-5415-98ad-fd8e6f1b19b4", "relationship--03f831f8-f551-59a0-a797-d2dd4bc6be0d", "relationship--90f0606e-c6f6-5358-a304-21c8d46c78f3", "relationship--8f86b1ae-98cb-59a0-8fc3-7ac8f5816f1d", "relationship--c01542ca-6449-5b10-8574-3df595690413", "relationship--e1f05079-34da-55e2-8c35-bad4ab35a899", "relationship--852e8665-a250-5ad7-878b-a56bb01dd3c0", "relationship--b044e771-2f95-534a-9473-be9acb00f77c", "relationship--d045074d-af2b-5e87-ba2e-8f93e53755b4", "relationship--9f3cd811-0124-5f33-99da-64d217d0801b", "relationship--cbcd49ea-1384-5bd4-89d2-9966ae647497", "relationship--e99932d4-2a59-5396-9dc0-36b9ebfd950a", "relationship--532c1278-e2b5-5e5d-9c62-9ca97fbea257", "relationship--2e4cc299-f5ec-59d2-8da9-c5aecc3f43e3", "relationship--3e9897a5-626e-5ccb-b06a-65435b3eee31", "relationship--826e800e-822e-50b3-b82f-1616169bed79", "relationship--8c96608f-5e56-56d4-94fb-6ee2023dd3af", "relationship--fff1541b-2476-55e4-a728-ab971db7611f", "relationship--5f9135fc-5746-5641-90c1-42cbdcc6f86e", "relationship--01dc40a3-107f-5e04-8887-4e308484df78", "relationship--60f0c03b-c14d-52c8-818b-dd2365e5afaf", "relationship--20348f87-d27b-5032-bcb8-5088723e5b85", "relationship--f0b7ab62-88ca-5c54-a597-a453f481201e", "relationship--d8134b82-b6fb-54cf-a3da-cf2e633304f1", "relationship--b490b48f-7365-53db-bdb5-4b01d8f2096d", "relationship--a43cabe3-2330-5b33-9c0b-38eb215c311b", "relationship--4405a682-5f14-51b3-8bbc-14946635a8c7", "relationship--74bbc50c-add8-5799-a4e6-d9e87180443c", "relationship--e29bd32d-1aaa-57ee-8388-8e0928bd3686", "relationship--1df1d3fb-895f-5056-ae84-8b55ab6fc3e0", "relationship--a75c87da-80a6-584b-933e-a9ded6996809", "relationship--cde45747-693b-5fb0-8234-fba16547e060", "relationship--cfc73050-fb2c-54e6-8936-ab77f3ce3324", "relationship--dc29fc55-28e9-51a7-8dc1-2c2533603fe3", "relationship--a1bdd06e-6a20-5160-ac76-63c3763c6b55", "relationship--abb3c860-2381-5b91-9079-f97172136272", "relationship--67591528-19ab-5da8-92be-4c7ce33bb0cb", "relationship--db1a1c4f-f515-57e2-8fae-0900f3d07c75", "relationship--5c29bd94-46c6-5a89-a446-70557fd2a40a", "relationship--4134ea07-c6f3-5260-b64a-71d083a911c9", "relationship--87b08ea8-408a-5c95-a774-994bb4a27e9d", "relationship--642170ea-2f6d-51df-af39-f3b3def35f89", "relationship--a521e1b3-ad81-51ba-b0db-24dd8e2f94e3", "relationship--44723167-5efb-5049-b497-9813ef43e219", "relationship--7db30453-ee72-556b-8579-f45c372f2b9d", "relationship--4636dda9-bf6c-55bb-9043-0c9c62701b75", "relationship--c9b034bc-0ead-5fa4-96c5-1b3b95c113d2", "relationship--9c59d203-c0ed-516d-8c84-272420516b3e", "relationship--6a7320cb-e77a-5f5c-b542-63c69a64e466", "relationship--7e09f29c-a7bf-5196-a18e-9c0f5ec1882d", "relationship--e2a94cca-0ce3-5258-a25d-f13d412c749b", "relationship--9ed03c73-9aa9-5fe0-bc40-72c35d74f228", "relationship--18f2b0e7-f86c-5a7a-904d-827db4067737", "relationship--670a8e4c-83ce-5bf8-ad0c-f99efe30e9cb", "relationship--e6b59488-760f-5d5a-8e0e-3ca12cfafb13", "relationship--cd7eaf1e-e4eb-5052-b349-dc9117634907", "relationship--dbee45bb-b4f1-529a-b6ac-86580b3158c8", "relationship--b7614a1f-a5e3-57ae-b8b8-acbac9c9f0ba", "relationship--45abdb1c-90bb-5b2c-bfe7-8ae1c98d9b81", "relationship--56e4c670-8400-5c9d-8605-eb7b9391fefd", "relationship--9d7368d0-1241-5df4-8627-44a25487f17d", "relationship--e2a08186-290c-542a-a4b2-db2792a06cba", "relationship--d2ba83d4-14a7-52a4-89e5-a2e015d6e8b1", "relationship--e423a4ad-82fe-5295-9d43-920657558906", "relationship--2720091e-6be2-578d-828d-88d047e82c53", "relationship--803b06cd-c33a-5675-af2f-78e4374184b1", "relationship--be3585d0-5571-53c6-a727-8eed56a7a4ee", "relationship--6a7deb06-6aec-5133-832b-85a997fc348e", "relationship--055312b8-f3b8-5a70-bacc-c2eb44a01d17", "relationship--dce86aa6-d515-525b-a4b6-81a3779fed91", "relationship--f5ece1f5-c01b-5b53-a4b9-ded0fc9fefc1", "relationship--79f308e1-b3b7-564c-9f06-f702a71e31c3", "relationship--ce79380d-2707-59d2-85c2-9f0784e24707", "relationship--5c562f80-9dfa-5896-8d05-a7901054fcb8", "relationship--b71e97cd-d30a-54bb-9a9e-9c954dbbec7e", "relationship--33b37618-8b0f-5047-9b1e-dfac233c9710", "relationship--49f223db-17bd-5aff-a4d3-b9601d838b02", "relationship--d4afda88-c4be-58c1-a242-1b29c3653dad", "relationship--409823c7-491a-5425-85f4-b8e66fa1d55f", "relationship--fec093f9-0ac4-59d9-87aa-7a6b40e55097", "relationship--c3394828-95a0-54e1-852a-1bb6c82302c9", "relationship--3c943f75-1d82-5cd0-b33e-83d9c05c9bf8", "relationship--0d521830-9533-5272-865c-89b77527de8d", "relationship--f9a23ada-64ea-5246-9a68-6750fcc27b83", "relationship--2e61a975-194f-5bbe-bda2-85daf2ca8e49", "relationship--9b448aae-3466-57c2-9571-684e6b82f99c", "relationship--ece6e7ee-755c-52f3-b95d-4f67b8a5324c", "relationship--c3c93c04-38c4-5fce-9dc8-61c9e3ff9f12", "relationship--607bf7f7-fca7-5068-ae80-f002051b2086", "relationship--9acb1af7-b254-55ed-87ce-4499329bf7e8", "relationship--a9247325-67a4-50dc-a947-096d068b30bd", "relationship--ae1ed1db-9987-558a-9162-b1419bf67ee3", "relationship--eecbfbde-5406-569b-a920-9b098848364b", "relationship--c2ca729d-f9be-5490-ae33-54a80063a7d7", "relationship--238031b6-65cd-545e-a130-aa9e53c77360", "relationship--e2c994d7-f80d-5362-91e3-185893722f7d", "relationship--85654ad8-cccd-524e-9547-388c42700288", "relationship--8c325885-2608-5163-be96-fab4f51412cd", "relationship--e2fcf0bb-0ada-50ab-a98e-cf1addec29f3", "relationship--9ca18ba3-17c7-515b-a56a-7f59f22cd43f", "relationship--eb2ae224-f56e-5c24-aee1-88132598e947", "relationship--f928c99e-15bb-5773-a72d-84787845d9b7" ], "labels": [ "Cryptojacking", "Rootkit", "Toolkit", "Open Dir" ], "external_references": [ { "source_name": "The Hunters Ledger", "url": "https://the-hunters-ledger.com/reports/ghost-cryptojacker-vova75rus-77.110.96.200/" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] } ] }