{ "type": "bundle", "id": "bundle--ae981234-69fe-47ce-a9ce-ac0c60c96881", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.868793Z", "modified": "2026-06-14T11:56:43.868793Z", "name": "The Hunters Ledger", "identity_class": "organization" }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } }, { "type": "ipv4-addr", "spec_version": "2.1", "id": "ipv4-addr--3257cf08-74ae-5e80-be92-c02eb35abbec", "value": "45.130.148.125" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b88583ed-5f96-51aa-a903-3c4cc6b4487e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.869283Z", "modified": "2026-06-14T11:56:43.869283Z", "name": "ipv4: 45.130.148.125", "indicator_types": [ "malicious-activity" ], "pattern": "[ipv4-addr:value = '45.130.148.125']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-04-30T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "url", "spec_version": "2.1", "id": "url--8c9f4d09-6837-5d6f-8e4d-7ea16ed529f9", "value": "http://45.130.148.125:80/api/v1/status" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ab87d42d-b67d-5448-98d1-696dff808c69", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.870764Z", "modified": "2026-06-14T11:56:43.870764Z", "name": "url: http://45.130.148.125:80/api/v1/status", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://45.130.148.125:80/api/v1/status']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-04-30T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "url", "spec_version": "2.1", "id": "url--9d30fbfa-e5e1-5bf6-848c-a85922ae392a", "value": "http://45.130.148.125:80/updates/check.php" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fa6a1922-fa93-5ba1-bd6a-5e0a917162dc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.871509Z", "modified": "2026-06-14T11:56:43.871509Z", "name": "url: http://45.130.148.125:80/updates/check.php", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://45.130.148.125:80/updates/check.php']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-04-30T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "url", "spec_version": "2.1", "id": "url--fc9dab5a-35ff-5f85-b3be-14c632464a66", "value": "http://45.130.148.125:80/content.html" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--33ca0dc9-26b9-5e29-99e9-f5e45f68de72", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.8723Z", "modified": "2026-06-14T11:56:43.8723Z", "name": "url: http://45.130.148.125:80/content.html", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://45.130.148.125:80/content.html']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-04-30T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "url", "spec_version": "2.1", "id": "url--178885d7-ee1f-5b06-81e3-bf7b5b36d226", "value": "http://45.130.148.125:80/jquery-3.3.1.min.js" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d5da48a8-19df-5f0c-8628-81de1cce9bff", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.872856Z", "modified": "2026-06-14T11:56:43.872856Z", "name": "url: http://45.130.148.125:80/jquery-3.3.1.min.js", "indicator_types": [ "malicious-activity" ], "pattern": "[url:value = 'http://45.130.148.125:80/jquery-3.3.1.min.js']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-04-30T00:00:00Z", "confidence": 80, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "x_opencti_detection": false, "x_opencti_score": 80 }, { "type": "file", "spec_version": "2.1", "id": "file--2a61bb1c-d9db-557e-97e6-630a7a4d6c48", "hashes": { "SHA-256": "358edb5d7e3e38c2da0a2ef323a281283aa96d47a8649014d114923b06866c12" } }, { "type": "file", "spec_version": "2.1", "id": "file--4ba3a103-b5a1-5a46-a234-0d0e206dc0c3", "hashes": { "SHA-256": "e55fd33ba5316622c42021f39c246c9055acaeca180779816a44b93454513c01" } }, { "type": "file", "spec_version": "2.1", "id": "file--3c8b98ce-d33a-5270-913e-b5f32c5a46cb", "hashes": { "SHA-256": "5f10b9b68fcc2e3a15ee5b7dd996f2fadf5a1b65c7c73120abb6ec315c38d756" } }, { "type": "file", "spec_version": "2.1", "id": "file--3eb47714-c782-58d2-91e9-d8ccb4a764c7", "hashes": { "SHA-256": "5bc6603e47ddaea79b8050ea1c076d9d9c2d06a9f350f698d5147fbbbe4e7bac" } }, { "type": "file", "spec_version": "2.1", "id": "file--ce8281e7-76f2-52bf-95a1-2ec38136d049", "hashes": { "SHA-256": "b4ffd7ca8f5505fd7b71882c67712e896c9d170a3b3b581baba78ee5d1c2b858" } }, { "type": "file", "spec_version": "2.1", "id": "file--3d69d04b-4b83-57ae-9830-d6d7ca9968dd", "hashes": { "SHA-256": "5ea265ad3e6429cd2e8d9831360f7e2be9b8ba5a5b32a4a60c5c956a3f8fb285" } }, { "type": "file", "spec_version": "2.1", "id": "file--2d307603-73df-5a9b-a306-286a223b57b0", "hashes": { "SHA-256": "20fcb557c7c4ada8173576b56aadc8f917c668b9e4b2aaf05fb90375147fd27f" } }, { "type": "file", "spec_version": "2.1", "id": "file--ca7020be-42ef-52c3-803a-e9b7e5336a14", "hashes": { "SHA-256": "f68507d88b007817901ffe3537a2d3935de53344ddfb6f0838d4141e3c02e07d" } }, { "type": "file", "spec_version": "2.1", "id": "file--0e31bbce-839a-503e-8e06-4110de5b66d9", "hashes": { "SHA-256": "4b41f36f82db6da8767a0a1c2997c8242d80b2d10a8f1d28c252a9306ec152b5" } }, { "type": "file", "spec_version": "2.1", "id": "file--e4eb2c93-e994-572e-98cd-c1cc338462e7", "hashes": { "SHA-256": "5db5e7f655c4ee94411df8110d1b6d02bb15574ac199fa7a553ce6c3cb25bf03" } }, { "type": "file", "spec_version": "2.1", "id": "file--ff63f010-a21e-5c1b-bb6c-86fab109b94e", "hashes": { "SHA-256": "144247b20c1f2aaf9ad5bedd1672a7ebd6041c9237d8931d1822e27c0562420b" } }, { "type": "file", "spec_version": "2.1", "id": "file--3bda8c02-e4ec-58e7-a127-5027b82c1406", "hashes": { "SHA-256": "fd9e3ad797022df67a406e1bb1bf1db57e2a14f66c668e22104a16bc735efc4e" } }, { "type": "file", "spec_version": "2.1", "id": "file--f4d19c0c-b2f3-5b5a-ac10-d3e82b600f51", "hashes": { "SHA-256": "ec54e9e5802423d17f1390a25a811b7779c33d8e7ad942cd731dfd366998eccb" } }, { "type": "file", "spec_version": "2.1", "id": "file--bde49c0b-2f8e-536c-815f-95ccc1dffae9", "hashes": { "SHA-256": "af5c3a5f68323ac68b258dae37c20e48f594118d08479f92a78bd54d26debd9a" } }, { "type": "file", "spec_version": "2.1", "id": "file--99f29585-fd5c-57ce-b967-0fbaf6538a88", "hashes": { "SHA-256": "9a8e9d587b570d4074f1c8317b163aa8d0c566efd88f294d9d85bc7776352a28" } }, { "type": "file", "spec_version": "2.1", "id": "file--6af03918-6d4a-54dd-bca9-48ff42e23ea3", "hashes": { "SHA-256": "61c0810a23580cf492a6ba4f7654566108331e7a4134c968c2d6a05261b2d8a1" } }, { "type": "file", "spec_version": "2.1", "id": "file--aa9664ad-ca86-5345-9347-ade3caa95ddf", "hashes": { "SHA-256": "e8fbec25db4f9d95b5e8f41cca51a4b32be8674a4dea7a45b6f7aeb22dbc38db" } }, { "type": "file", "spec_version": "2.1", "id": "file--48984a3b-50a3-5681-a9cf-07762526a141", "hashes": { "SHA-256": "316f9165ba23b968d33966cd2cef70b10b9e5973117b3864b51048292bbb6742" } }, { "type": "file", "spec_version": "2.1", "id": "file--9ae06d3d-7924-5891-bbe3-d79c9b6e3ce8", "hashes": { "SHA-256": "507e8666c239397561c58609f7ea569c9c49ddbb900cd260e7e42b02d03cfd87" } }, { "type": "file", "spec_version": "2.1", "id": "file--c823cb52-ddab-5978-a468-70e1b590a30e", "hashes": { "SHA-256": "8524fbc0d73e711e69d60c64f1f1b7bef35c986705880643dd4d5e17779e586d" } }, { "type": "file", "spec_version": "2.1", "id": "file--95516490-c20e-5add-8261-ccbd815d33bb", "hashes": { "SHA-256": "1bfbefa4ff4d0df3ee0090b5079cf84ed2e8d5377ba5b7a30afd88367d57b9ff" } }, { "type": "file", "spec_version": "2.1", "id": "file--cdc9df48-9494-5e3f-ad41-2c2eacea7713", "hashes": { "SHA-256": "29955ba1e2193047ee5f4561445f81e218ae4de1a295f8fd296ad536bf381f17" } }, { "type": "file", "spec_version": "2.1", "id": "file--55291c84-d59f-5ec4-912c-a018a1b67422", "hashes": { "SHA-256": "cb5a07900a7a01a7619e3391c0a2b59f81a8d8784c66698bb02263faef9311a1" } }, { "type": "file", "spec_version": "2.1", "id": "file--eb5185cc-08e5-5d63-81bb-eee507ef3e48", "hashes": { "SHA-256": "277ff28006eac42319597abb10ae51541b5e6b06884c135a111416c833144973" } }, { "type": "file", "spec_version": "2.1", "id": "file--398a2c22-ad32-58c4-acf0-57c98f1c3ad1", "hashes": { "SHA-256": "f091c63809e27e7d2ef3c3506f5c59563817a7876b737e3995540b051b225e51" } }, { "type": "file", "spec_version": "2.1", "id": "file--a1fa9014-19a2-5ddb-ae4f-c59572741c16", "hashes": { "SHA-256": "f887e04ce6c43da608cfcb45e51398305bb3912ee9d88ac7569c917e245d404a" } }, { "type": "file", "spec_version": "2.1", "id": "file--14ff958f-9651-5107-be45-e41dc6ac9471", "hashes": { "SHA-256": "8b5c0ec2718474c6959d39d36113efd01e42e1776103d2a90b3bedb4c6a091bb" } }, { "type": "file", "spec_version": "2.1", "id": "file--d221d8cb-e340-5709-ae0f-9d16337b3aea", "hashes": { "SHA-256": "ce709770ac09b79ed9894542a140e76a897bf897bd27855e11cc0ece7194114f" } }, { "type": "file", "spec_version": "2.1", "id": "file--267b7d2b-acb4-5c15-a8b9-e3094f78f72a", "hashes": { "SHA-256": "d9be165fc7009fc273039790375bf2447ebab1b7d73c88b064e1be1df43673b6" } }, { "type": "file", "spec_version": "2.1", "id": "file--e035f280-a833-552e-8920-2ea49187bc9f", "hashes": { "SHA-256": "dc06d62ee95062e714f2566c95b8edaabfd387023b1bf98a09078b84007d5268" } }, { "type": "file", "spec_version": "2.1", "id": "file--f52bb763-d4dc-5590-9173-d25c83daecf3", "hashes": { "imphash": "4cfec38bf3c1557ad25faba737f8e275" } }, { "type": "file", "spec_version": "2.1", "id": "file--9e0284a9-7d94-5eb8-9228-cb965207bca5", "hashes": { "imphash": "63cb3b95faad6b28fcce52a6aa698ff2" } }, { "type": "file", "spec_version": "2.1", "id": "file--c6a5cee5-db07-55bd-b830-a7bd1240f7f5", "hashes": { "imphash": "f67fc0b1a6e0c3b07adb524e2db8774f" } }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--21b9ee10-0c0b-5c2f-8b47-d1229c5798d0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.878452Z", "modified": "2026-06-14T11:56:43.878452Z", "name": "MALW_AdaptixC2_Windows_Beacon_Stock", "indicator_types": [ "malicious-activity" ], "pattern": "/*\n Name: AdaptixC2 Operator Toolkit \u2014 45.130.148.125\n Author: The Hunters Ledger\n Date: 2026-04-30\n Identifier: AdaptixC2 Windows Beacon + Operator Injector + PowerShell Loader\n Reference: https://the-hunters-ledger.com/hunting-detections/opendirectory-45-130-148-125-20260430-detections/\n License: https://creativecommons.org/licenses/by-nc/4.0/\n*/\n\nrule MALW_AdaptixC2_Windows_Beacon_Stock\n{\n meta:\n description = \"Detects AdaptixC2 Windows beacon (DLL/EXE) by stock Itanium-ABI RTTI typeinfo strings, RDI loader export, and heartbeat header \u2014 catches any operator running stock AdaptixC2 with default connector names\"\n author = \"The Hunters Ledger\"\n date = \"2026-04-30\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/opendirectory-45-130-148-125-20260430-detections/\"\n hash_sha256 = \"358edb5d7e3e38c2da0a2ef323a281283aa96d47a8649014d114923b06866c12\"\n family = \"AdaptixC2\"\n\n strings:\n $s1 = \"9Connector\" ascii\n $s2 = \"13ConnectorHTTP\" ascii\n $s3 = \"GetVersions\" ascii\n $s4 = \"Mingw-w64 runtime failure:\" ascii\n $s5 = \"X-Beacon-Id\" ascii\n\n condition:\n uint16(0) == 0x5A4D and\n filesize < 300KB and\n ($s1 and $s2) and\n ($s3 or $s4) and\n $s5\n}\n\nrule MALW_AdaptixC2_Operator_Injector_SI\n{\n meta:\n description = \"Detects the operator-written .NET v4.7.2 SI class CRT injector (injector.dll) by Linux PDB path and build-name placeholder strings \u2014 actor-specific fingerprint not present in any AdaptixC2 stock component\"\n author = \"The Hunters Ledger\"\n date = \"2026-04-30\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/opendirectory-45-130-148-125-20260430-detections/\"\n hash_sha256 = \"5ea265ad3e6429cd2e8d9831360f7e2be9b8ba5a5b32a4a60c5c956a3f8fb285\"\n family = \"AdaptixC2\"\n\n strings:\n $s1 = \"/tmp/si_build/obj/Release/net472/si_build.pdb\" ascii\n $s2 = \"si_build\" ascii\n\n condition:\n uint16(0) == 0x5A4D and\n filesize < 20KB and\n $s1 and $s2\n}\n\nrule MALW_AdaptixC2_Beacon_RC4_Operator_Key\n{\n meta:\n description = \"Detects AdaptixC2 Windows beacon compiled for the 45.130.148.125 operator by matching the recovered RC4 config key (f443b9ce7e0658900f6a7ff0991cdee6) stored plaintext in .rdata alongside encrypted config\"\n author = \"The Hunters Ledger\"\n date = \"2026-04-30\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/opendirectory-45-130-148-125-20260430-detections/\"\n hash_sha256 = \"358edb5d7e3e38c2da0a2ef323a281283aa96d47a8649014d114923b06866c12\"\n family = \"AdaptixC2\"\n\n strings:\n $b1 = { F4 43 B9 CE 7E 06 58 90 0F 6A 7F F0 99 1C DE E6 }\n $s1 = \"9Connector\" ascii\n $s2 = \"13ConnectorHTTP\" ascii\n\n condition:\n uint16(0) == 0x5A4D and\n filesize < 300KB and\n $b1 and\n ($s1 or $s2)\n}\n\nrule MALW_AdaptixC2_PowerShell_Loader_BeaconPS1\n{\n meta:\n description = \"Detects the operator-written beacon.ps1 PowerShell delivery loader by concatenated AMSI bypass, SI injector invocation, and base64 MZ prefix for inline PE \u2014 all three elements must co-occur\"\n author = \"The Hunters Ledger\"\n date = \"2026-04-30\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/opendirectory-45-130-148-125-20260430-detections/\"\n hash_sha256 = \"b4ffd7ca8f5505fd7b71882c67712e896c9d170a3b3b581baba78ee5d1c2b858\"\n family = \"AdaptixC2\"\n\n strings:\n $s1 = \"amsi'+'Con'+'text\" ascii nocase\n $s2 = \"*iUtils\" ascii\n $s3 = \"[SI]::Inject(\" ascii\n $s4 = \"TVqQAAMA\" ascii\n\n condition:\n filesize < 512KB and\n $s1 and $s2 and $s3 and $s4\n}\n\nrule MALW_Ligolo_ng_v083_Agent\n{\n meta:\n description = \"Detects Ligolo-ng v0.8.3 stock reverse-tunnel agent by embedded version string, Go package namespace, and upstream commit hash \u2014 operator bundled this for internal-network pivot\"\n author = \"The Hunters Ledger\"\n date = \"2026-04-30\"\n reference = \"https://the-hunters-ledger.com/hunting-detections/opendirectory-45-130-148-125-20260430-detections/\"\n hash_sha256 = \"4b41f36f82db6da8767a0a1c2997c8242d80b2d10a8f1d28c252a9306ec152b5\"\n family = \"Ligolo-ng\"\n\n strings:\n $s1 = \"nicocha30/ligolo-ng/pkg/\" ascii\n $s2 = \"0.8.3\" ascii\n $s3 = \"913fe64e088d5db2185d392965bf4cd3dd1d9495\" ascii\n\n condition:\n filesize < 15MB and\n $s1 and\n ($s2 or $s3)\n}", "pattern_type": "yara", "valid_from": "2026-04-30T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--094fbbc6-536d-50a0-8f71-461cd28ab1b2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.87882Z", "modified": "2026-06-14T11:56:43.87882Z", "name": "AdaptixC2 PowerShell Loader - AMSI Bypass and SI Injector Invocation", "indicator_types": [ "malicious-activity" ], "pattern": "title: AdaptixC2 PowerShell Loader - AMSI Bypass and SI Injector Invocation\nid: a3f1c8e2-7b45-4d91-b832-6e0d9f2c1a74\nstatus: test\ndescription: Detects execution of the AdaptixC2 operator beacon.ps1 PowerShell loader by matching the string-concatenated AMSI bypass marker combined with the operator-specific SI injector class invocation and an embedded base64 MZ PE prefix. The concatenation pattern amsi+Con+text evades static AV string signatures; [SI]::Inject( identifies the operator-custom .NET injector loaded in-memory. Co-occurrence of all three strings in a single script block is highly specific to this loader. Requires PowerShell Script Block Logging (Event ID 4104).\nreferences:\n - https://the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/\nauthor: The Hunters Ledger\ndate: 2026/04/30\ntags:\n - attack.execution\n - attack.defense-evasion\nlogsource:\n product: windows\n category: ps_script\ndetection:\n selection_amsi:\n ScriptBlockText|contains: \"amsi'+'Con'+'text\"\n selection_injector:\n ScriptBlockText|contains: '[SI]::Inject('\n selection_base64_mz:\n ScriptBlockText|contains: 'TVqQAAMA'\n condition: selection_amsi and selection_injector and selection_base64_mz\nfalsepositives:\n - Custom internal PowerShell tooling that coincidentally uses both an AMSI bypass via string concatenation and a class named SI with an Inject method - considered highly unlikely outside of adversary tooling\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-04-30T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--29ee4afb-5cba-509e-a459-07bbbffd3f0f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.879081Z", "modified": "2026-06-14T11:56:43.879081Z", "name": "AdaptixC2 Default Listener - Anomalous Firefox 20 User-Agent with X-Beacon-Id Header", "indicator_types": [ "malicious-activity" ], "pattern": "title: AdaptixC2 Default Listener - Anomalous Firefox 20 User-Agent with X-Beacon-Id Header\nid: 7c9d4b81-3e62-4f08-a517-2d8e5a6c0b93\nstatus: test\ndescription: Detects outbound HTTP traffic matching the AdaptixC2 stock listener default profile. The Firefox 20 User-Agent (released February 2013) is anomalous in 2026 traffic and is the AdaptixC2 default listener UA string. The X-Beacon-Id header is the AdaptixC2 stock per-agent heartbeat header not used by any known legitimate browser or application. Co-occurrence of both indicators identifies any operator running stock AdaptixC2 with default listener configuration.\nreferences:\n - https://the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/\nauthor: The Hunters Ledger\ndate: 2026/04/30\ntags:\n - attack.command-and-control\nlogsource:\n category: proxy\ndetection:\n selection:\n cs-user-agent|contains: 'Firefox/20.0'\n cs-headers|contains: 'X-Beacon-Id'\n condition: selection\nfalsepositives:\n - Legacy embedded systems or industrial control software using a hardcoded Firefox 20 UA string - cross-reference against known asset inventory to exclude\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-04-30T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fc496f6f-fe13-5ba1-ac33-ef3aef6ea4e8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.879323Z", "modified": "2026-06-14T11:56:43.879323Z", "name": "AdaptixC2 Beacon - High-Frequency Deterministic HTTP POST Cadence to Stock URIs", "indicator_types": [ "malicious-activity" ], "pattern": "title: AdaptixC2 Beacon - High-Frequency Deterministic HTTP POST Cadence to Stock URIs\nid: 2e7f5a93-8c14-4b67-d259-1a3f6e8d0c52\nstatus: test\ndescription: Detects the AdaptixC2 fast-beacon callback pattern - a source IP making more than five HTTP POST requests within 30 seconds to stock AdaptixC2 URI paths (/api/v1/status or /jquery-3.3.1.min.js). The 4-5 second sleep with zero jitter produces a deterministic cadence that is highly anomalous for production traffic. Requires proxy log aggregation with count-by-source capability and a 30-second sliding window.\nreferences:\n - https://the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/\nauthor: The Hunters Ledger\ndate: 2026/04/30\ntags:\n - attack.command-and-control\nlogsource:\n category: proxy\ndetection:\n selection:\n cs-method: POST\n cs-uri-stem|contains:\n - '/api/v1/status'\n - '/jquery-3.3.1.min.js'\n condition: selection | count() by c-ip > 5\n timeframe: 30s\nfalsepositives:\n - Legitimate health-check endpoints polled at high frequency by infrastructure monitoring agents - add known monitoring source IPs to an allowlist filter\n - CI/CD pipeline job runners issuing rapid POST requests to status endpoints during build phases\nlevel: medium", "pattern_type": "sigma", "valid_from": "2026-04-30T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d76b55fc-949f-5b1c-862b-bb6a03cff661", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.879565Z", "modified": "2026-06-14T11:56:43.879565Z", "name": "Suspicious .NET Assembly Image Load with Operator si_build Build Fingerprint", "indicator_types": [ "malicious-activity" ], "pattern": "title: Suspicious .NET Assembly Image Load with Operator si_build Build Fingerprint\nid: 5b8e2d47-1c93-4a76-f018-9b4d7e3c6f85\nstatus: test\ndescription: Detects PowerShell loading a .NET DLL image whose PE version metadata contains the operator build-placeholder string si_build. This string appears in CompanyName, FileDescription, InternalName, and OriginalFilename fields of the operator-written injector.dll found in this AdaptixC2 deployment. The string is a Linux-build artifact from /tmp/si_build/ left unredacted in the PE version resource and is not present in any known legitimate software.\nreferences:\n - https://the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/\nauthor: The Hunters Ledger\ndate: 2026/04/30\ntags:\n - attack.defense-evasion\n - attack.privilege-escalation\nlogsource:\n product: windows\n category: image_load\ndetection:\n selection:\n Image|endswith: '\\\\powershell.exe'\n Description|contains: 'si_build'\n filter_legitimate:\n Signed: 'true'\n condition: selection and not filter_legitimate\nfalsepositives:\n - Internal developer tooling where a developer has named a build artifact si_build and loaded it via PowerShell - cross-reference against software asset inventory\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-04-30T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a5f38ce6-890d-51b2-8480-756827ab7a71", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.879792Z", "modified": "2026-06-14T11:56:43.879792Z", "name": "Suspicious Active Directory Reconnaissance Tool Execution", "indicator_types": [ "malicious-activity" ], "pattern": "title: Suspicious Active Directory Reconnaissance Tool Execution\nid: 9a3c6f12-4d87-4e52-b741-8c5f2a9d0e67\nstatus: test\ndescription: Detects execution of common Active Directory enumeration tools observed in this AdaptixC2 operator toolkit - SharpHound for BloodHound attack-path mapping, PowerView for PowerSploit AD recon, and ADRecon for comprehensive AD data harvesting. These tools are commodity open-source utilities frequently used by threat actors to identify domain privilege escalation paths, enumerate domain accounts and groups, and map trust relationships prior to lateral movement.\nreferences:\n - https://the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/\n - https://github.com/BloodHoundAD/BloodHound\n - https://github.com/PowerShellMafia/PowerSploit\nauthor: The Hunters Ledger\ndate: 2026/04/30\ntags:\n - attack.discovery\nlogsource:\n product: windows\n category: process_creation\ndetection:\n selection_sharphound:\n Image|endswith: '\\\\SharpHound.exe'\n CommandLine|contains:\n - '-c All'\n - '--CollectionMethods'\n - '-CollectionMethod'\n selection_powerview:\n CommandLine|contains:\n - 'Get-NetDomain'\n - 'Get-NetForest'\n - 'Invoke-BloodHound'\n - 'Get-DomainTrust'\n - 'Get-NetGroupMember'\n selection_adrecon:\n Image|endswith: '\\\\ADRecon.exe'\n condition: selection_sharphound or selection_powerview or selection_adrecon\nfalsepositives:\n - Authorized penetration testing or red team exercises - correlate against change management records and authorized testing windows\n - EDR or vulnerability assessment platforms that incorporate BloodHound data collection natively\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-04-30T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8c8d3ca6-f2b5-5aa4-a8ec-7e4ac08edad4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.880022Z", "modified": "2026-06-14T11:56:43.880022Z", "name": "Ligolo-ng Reverse Tunnel Agent Execution", "indicator_types": [ "malicious-activity" ], "pattern": "title: Ligolo-ng Reverse Tunnel Agent Execution\nid: 3f7a2b58-9e04-4c83-a625-1d6b8f4e2a91\nstatus: test\ndescription: Detects execution of the Ligolo-ng reverse-tunneling agent by process image name, command-line connect argument combined with default port, or known file hash for stock v0.8.3. Ligolo-ng is an open-source TLS-over-TCP reverse proxy tool used by threat actors to create tunnels from a compromised host into internal networks, enabling lateral movement without direct routing. The operator in this campaign deployed the stock upstream v0.8.3 release at commit 913fe64e088d5db2185d392965bf4cd3dd1d9495.\nreferences:\n - https://the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/\n - https://github.com/nicocha30/ligolo-ng\nauthor: The Hunters Ledger\ndate: 2026/04/30\ntags:\n - attack.command-and-control\nlogsource:\n product: windows\n category: process_creation\ndetection:\n selection_name:\n Image|endswith:\n - '\\\\ligolo.exe'\n - '\\\\ligolo-ng.exe'\n selection_cmdline:\n CommandLine|contains:\n - '--connect'\n - '-connect'\n selection_port:\n CommandLine|contains: ':11601'\n selection_hash:\n Hashes|contains: 'SHA256=4B41F36F82DB6DA8767A0A1C2997C8242D80B2D10A8F1D28C252A9306EC152B5'\n condition: selection_name or (selection_cmdline and selection_port) or selection_hash\nfalsepositives:\n - Authorized penetration testing or network administration use of Ligolo-ng - correlate against authorized change records and known red team activity windows\n - Security research and lab environments where Ligolo-ng is used for legitimate network tunneling evaluation\nlevel: high", "pattern_type": "sigma", "valid_from": "2026-04-30T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--605f7e43-cbbb-5cb2-afb9-ff1cbd680d6c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.880247Z", "modified": "2026-06-14T11:56:43.880247Z", "name": "THL - AdaptixC2 Operator Beacon C2 Traffic to 45.130.148.125 - Firefox 20 UA", "indicator_types": [ "malicious-activity" ], "pattern": "alert http $HOME_NET any -> 45.130.148.125 any (msg:\"THL - AdaptixC2 Operator Beacon C2 Traffic to 45.130.148.125 - Firefox 20 UA\"; flow:established,to_server; http.user_agent; content:\"Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/20.0\"; endswith; http.method; content:\"POST\"; reference:url,the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/; classtype:trojan-activity; sid:5001001; rev:1;)", "pattern_type": "suricata", "valid_from": "2026-04-30T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9ab437d5-7db8-5569-a739-2601dc627fff", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.880497Z", "modified": "2026-06-14T11:56:43.880497Z", "name": "THL - AdaptixC2 Default Listener X-Beacon-Id Heartbeat Header Detected", "indicator_types": [ "malicious-activity" ], "pattern": "alert http $HOME_NET any -> $EXTERNAL_NET any (msg:\"THL - AdaptixC2 Default Listener X-Beacon-Id Heartbeat Header Detected\"; flow:established,to_server; http.header_names; content:\"X-Beacon-Id\"; nocase; reference:url,the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/; classtype:trojan-activity; sid:5001002; rev:1;)", "pattern_type": "suricata", "valid_from": "2026-04-30T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--38508244-0ae6-5658-95a0-b72a67ff5fa6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.88073Z", "modified": "2026-06-14T11:56:43.88073Z", "name": "THL - AdaptixC2 Stock Listener URI Path with Firefox 20 UA", "indicator_types": [ "malicious-activity" ], "pattern": "alert http $HOME_NET any -> $EXTERNAL_NET any (msg:\"THL - AdaptixC2 Stock Listener URI Path with Firefox 20 UA\"; flow:established,to_server; http.user_agent; content:\"Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/20.0\"; endswith; http.method; content:\"POST\"; http.uri; content:\"/api/v1/status\"; nocase; reference:url,the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/; classtype:trojan-activity; sid:5001003; rev:1;)", "pattern_type": "suricata", "valid_from": "2026-04-30T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4181004e-43ab-5584-a5ba-64753f027be3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.880973Z", "modified": "2026-06-14T11:56:43.880973Z", "name": "THL - AdaptixC2 Operator-Added jQuery URI with Firefox 20 UA", "indicator_types": [ "malicious-activity" ], "pattern": "alert http $HOME_NET any -> $EXTERNAL_NET any (msg:\"THL - AdaptixC2 Operator-Added jQuery URI with Firefox 20 UA\"; flow:established,to_server; http.user_agent; content:\"Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/20.0\"; endswith; http.method; content:\"POST\"; http.uri; content:\"/jquery-3.3.1.min.js\"; nocase; reference:url,the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/; classtype:trojan-activity; sid:5001004; rev:1;)", "pattern_type": "suricata", "valid_from": "2026-04-30T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d923252f-185f-51c7-b2e0-a0af3c424a89", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.881212Z", "modified": "2026-06-14T11:56:43.881212Z", "name": "THL - AdaptixC2 Operator RC4 Config Key Bytes in Traffic (45.130.148.125 Operator-Specific)", "indicator_types": [ "malicious-activity" ], "pattern": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:\"THL - AdaptixC2 Operator RC4 Config Key Bytes in Traffic (45.130.148.125 Operator-Specific)\"; flow:established,to_server; content:\"|F4 43 B9 CE 7E 06 58 90 0F 6A 7F F0 99 1C DE E6|\"; reference:url,the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/; classtype:trojan-activity; sid:5001005; rev:1;)", "pattern_type": "suricata", "valid_from": "2026-04-30T00:00:00Z", "labels": [ "detection-rule" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.881477Z", "modified": "2026-06-14T11:56:43.881477Z", "name": "AdaptixC2", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--f8422077-3973-5026-80e8-7901120a07a4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.881766Z", "modified": "2026-06-14T11:56:43.881766Z", "name": "Ligolo-ng", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.881979Z", "modified": "2026-06-14T11:56:43.881979Z", "name": "Chisel", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.882181Z", "modified": "2026-06-14T11:56:43.882181Z", "name": "AdaptixC2-Gopher", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.882338Z", "modified": "2026-06-14T11:56:43.882338Z", "name": "Operator-PowerShell-Loader", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.882454Z", "modified": "2026-06-14T11:56:43.882454Z", "name": "Operator-DotNET-Injector", "is_family": true, "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--7a9a84a0-8108-5fb4-bbbe-f459b8fa9104", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.882587Z", "modified": "2026-06-14T11:56:43.882587Z", "name": "AdaptixC2 Windows beacon", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--add3e1b8-9529-5d6a-8720-9e808ffccbf1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.88304Z", "modified": "2026-06-14T11:56:43.88304Z", "name": "AdaptixC2 Windows beacon DLL renamed for sideload. Identical imphash", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--806a5614-3e4a-5f72-a615-d20117a6799a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.883297Z", "modified": "2026-06-14T11:56:43.883297Z", "name": "Operator-written PowerShell loader. 5-block logic: AMSI bypass", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--87db9afe-d2c1-5bad-baf6-da5306378d99", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.883416Z", "modified": "2026-06-14T11:56:43.883416Z", "name": "Operator-written .NET v4.7.2 PE injector", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--0e9732c6-b4ee-57a3-9321-feb6be429f83", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.883538Z", "modified": "2026-06-14T11:56:43.883538Z", "name": "XOR-0xA7-decoded beacon shellcode", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--18d35a6c-cfe2-518f-b09f-dae32f89b16e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.883662Z", "modified": "2026-06-14T11:56:43.883662Z", "name": "AdaptixC2 Gopher Go agent", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--57326b47-1490-5933-9558-26d087f7f406", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.883771Z", "modified": "2026-06-14T11:56:43.883771Z", "name": "Ligolo-ng v0.8.3 stock upstream commodity reverse-tunneling agent", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--e6bed0fd-480d-5525-b819-95ce8cc76e60", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.883876Z", "modified": "2026-06-14T11:56:43.883876Z", "name": "jpillora/chisel commodity Go reverse-tunneling tool. Go 1.26.1. 10.93 MB. Second pivot tool alongside Ligolo", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--b0e66980-03a7-5247-a1f9-a321396f58d3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.883979Z", "modified": "2026-06-14T11:56:43.883979Z", "name": "Small PowerShell AMSI bypass", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--8bc64dad-8c41-5dde-985e-1edc8662d9af", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.884084Z", "modified": "2026-06-14T11:56:43.884084Z", "name": "Uncustomized PowerShell template", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--6ff5555a-2aad-5fda-8a8f-e43c09a742cf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.884253Z", "modified": "2026-06-14T11:56:43.884253Z", "name": "Commodity AD reconnaissance PowerShell.", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--59ed6ee2-fccc-5d50-8ae5-95374efd253e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.884403Z", "modified": "2026-06-14T11:56:43.884403Z", "name": "Ghostpack/SpecterOps commodity AD CS abuse tool", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--a4e59458-e79e-506a-a2da-c3595d8c4e5b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.884564Z", "modified": "2026-06-14T11:56:43.884564Z", "name": "Commodity Windows local privilege escalation tool", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--14b58e6c-ad1b-500c-874a-23af4f198636", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.884753Z", "modified": "2026-06-14T11:56:43.884753Z", "name": "gentilkiwi mimikatz v2.2.0 commodity credential dumper. ProductName='mimikatz'", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--12d2d754-b3ea-5984-bc77-aacde638e054", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.884938Z", "modified": "2026-06-14T11:56:43.884938Z", "name": "Classic netcat", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--4be062fe-6b91-5a77-bb56-db5584e2a233", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.885286Z", "modified": "2026-06-14T11:56:43.885286Z", "name": "Commodity AD enumeration PowerShell. Triggers MALWARE_RULES: spyeye YARA false-positive \u2014 DETECTION-ENGINEER MUST FILTER", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--d7fde37b-1aab-54d6-aed9-4770f5a26c16", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.88544Z", "modified": "2026-06-14T11:56:43.88544Z", "name": "Commodity Windows print-spooler local privilege escalation tool.", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--367ce114-62ae-527c-a4ee-f10c721cefa2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.885559Z", "modified": "2026-06-14T11:56:43.885559Z", "name": "Ghostpack commodity Kerberos abuse tool. YARA: HKTL_NET_GUID_Rubeus.", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--510b0d98-30ce-50e3-8d67-3a6ecfb6ed4e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.885668Z", "modified": "2026-06-14T11:56:43.885668Z", "name": "Commodity credentialed-process-spawn tool. YARA: HKTL_NET_NAME_RunasCs.", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--cccab48c-53d4-58b0-b1fa-7ae3a2b523fb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.885772Z", "modified": "2026-06-14T11:56:43.885772Z", "name": "Ghostpack commodity situational-awareness tool. YARA: HKTL_NET_GUID_SharpPack.", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--8882149f-6ae8-548f-a619-a94cb1c3e7fb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.885874Z", "modified": "2026-06-14T11:56:43.885874Z", "name": "Ghostpack commodity DPAPI credential decryption tool.", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--37d03d03-65f6-5d20-b1a5-614768c8091a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.885996Z", "modified": "2026-06-14T11:56:43.885996Z", "name": "PRELIMINARY \u2014 heavily packed SharpHound variant", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--aaff500d-d585-5e0a-bc20-f950da5a44f5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.886099Z", "modified": "2026-06-14T11:56:43.886099Z", "name": "Commodity SharpHound PowerShell ingestor", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--5c7e9d82-837f-5eb2-acd0-164487006747", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.886199Z", "modified": "2026-06-14T11:56:43.886199Z", "name": "Commodity SharpSecDump credential extraction tool. Was triage type=unknown", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--18c8b693-fc09-5a8b-9397-ead6aa667ad5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.886297Z", "modified": "2026-06-14T11:56:43.886297Z", "name": "Commodity Windows enumeration / privilege escalation discovery tool.", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--68373f1e-ea28-5c4c-91a6-469f309a2351", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.886396Z", "modified": "2026-06-14T11:56:43.886396Z", "name": "lazagne 324 KB stock PyInstaller-built variant. Vanilla credential extractor.", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--335b85f7-ba9a-5315-a9df-3ee47a4647f6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.886515Z", "modified": "2026-06-14T11:56:43.886515Z", "name": "PRELIMINARY \u2014 heavily packed lazagne 10 MB variant", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.886666Z", "modified": "2026-06-14T11:56:43.886666Z", "name": "Acquire Infrastructure: Virtual Private Server", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1583/003", "external_id": "T1583.003" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.88696Z", "modified": "2026-06-14T11:56:43.88696Z", "name": "Obtain Capabilities: Tool", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1588/002", "external_id": "T1588.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--86d4700a-0ebb-52fb-9fdf-88224c58f7b6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.887216Z", "modified": "2026-06-14T11:56:43.887216Z", "name": "Command and Scripting Interpreter: PowerShell", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1059/001", "external_id": "T1059.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.887446Z", "modified": "2026-06-14T11:56:43.887446Z", "name": "Reflective Code Loading", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1620", "external_id": "T1620" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8e7236ae-f640-50d6-b963-93fae62071c7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.887655Z", "modified": "2026-06-14T11:56:43.887655Z", "name": "Impair Defenses: Disable or Modify Tools (AMSI bypass)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1562/001", "external_id": "T1562.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.887801Z", "modified": "2026-06-14T11:56:43.887801Z", "name": "Obfuscated Files or Information", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1027", "external_id": "T1027" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ba61986c-2ad8-5246-8fad-deba7ea471bd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.887944Z", "modified": "2026-06-14T11:56:43.887944Z", "name": "Deobfuscate/Decode Files or Information", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1140", "external_id": "T1140" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ab386774-9556-5bc2-8927-6d98193000ec", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.888085Z", "modified": "2026-06-14T11:56:43.888085Z", "name": "Data Encoding: Standard Encoding (Base64)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1132/001", "external_id": "T1132.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f49f7ccf-9e42-5d58-aaa7-c46f34716f27", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.888221Z", "modified": "2026-06-14T11:56:43.888221Z", "name": "Process Injection (parent)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1055", "external_id": "T1055" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d00141fc-37fa-5b54-9d20-a7bd180eeb75", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.888355Z", "modified": "2026-06-14T11:56:43.888355Z", "name": "Process Injection: Portable Executable Injection", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1055/002", "external_id": "T1055.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--35c31841-4eeb-5335-8d8f-dc05e292fdfc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.888484Z", "modified": "2026-06-14T11:56:43.888484Z", "name": "Hijack Execution Flow: DLL Side-Loading (msupdate.dll deployment artifact)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1574/002", "external_id": "T1574.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--cd2b8020-f743-5a86-89bd-242def0e953b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.888609Z", "modified": "2026-06-14T11:56:43.888609Z", "name": "OS Credential Dumping: LSASS Memory (mimikatz)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1003/001", "external_id": "T1003.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f023ef3b-b061-56b8-8d67-d5b66fa6c613", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.888734Z", "modified": "2026-06-14T11:56:43.888734Z", "name": "OS Credential Dumping: Security Account Manager (SharpSecDump)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1003/002", "external_id": "T1003.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--12acaf8f-029b-5f5b-8f13-47263822835a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.88886Z", "modified": "2026-06-14T11:56:43.88886Z", "name": "OS Credential Dumping: NTDS (SharpSecDump)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1003/003", "external_id": "T1003.003" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ba6b8d93-c1b1-5bd3-9ebe-465b4d49164e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.888986Z", "modified": "2026-06-14T11:56:43.888986Z", "name": "OS Credential Dumping: DCSync (mimikatz)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1003/006", "external_id": "T1003.006" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b4868fee-9a5d-56fc-a87b-bad2d374fea5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.889116Z", "modified": "2026-06-14T11:56:43.889116Z", "name": "Credentials from Password Stores (lazagne)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1555", "external_id": "T1555" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.889246Z", "modified": "2026-06-14T11:56:43.889246Z", "name": "Credentials from Password Stores: Web Browsers (SharpDPAPI/lazagne)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1555/003", "external_id": "T1555.003" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b5995633-347d-5213-a283-22c6abbb031e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.889403Z", "modified": "2026-06-14T11:56:43.889403Z", "name": "Credentials from Password Stores: Windows Credential Manager (SharpDPAPI)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1555/004", "external_id": "T1555.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.889557Z", "modified": "2026-06-14T11:56:43.889557Z", "name": "Unsecured Credentials: Private Keys (Certify)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/004", "external_id": "T1552.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2b613316-6a4f-5cbd-ad25-9e251342eb43", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.8897Z", "modified": "2026-06-14T11:56:43.8897Z", "name": "Steal or Forge Kerberos Tickets: Kerberoasting (Rubeus)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1558/003", "external_id": "T1558.003" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c042587b-4ea4-50cf-9f38-f81673df9459", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.889835Z", "modified": "2026-06-14T11:56:43.889835Z", "name": "Steal or Forge Kerberos Tickets: AS-REP Roasting (Rubeus)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1558/004", "external_id": "T1558.004" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.88997Z", "modified": "2026-06-14T11:56:43.88997Z", "name": "Input Capture: Keylogging (AdaptixC2 BOF)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1056/001", "external_id": "T1056.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.890101Z", "modified": "2026-06-14T11:56:43.890101Z", "name": "Process Discovery", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1057", "external_id": "T1057" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.890238Z", "modified": "2026-06-14T11:56:43.890238Z", "name": "System Information Discovery (Seatbelt/winpeas/linpeas)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1082", "external_id": "T1082" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.890371Z", "modified": "2026-06-14T11:56:43.890371Z", "name": "File and Directory Discovery (Seatbelt/winpeas)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1083", "external_id": "T1083" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.890503Z", "modified": "2026-06-14T11:56:43.890503Z", "name": "Remote System Discovery (SharpHound)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1018", "external_id": "T1018" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--bd2de1a2-5405-5f08-b368-3ed9ffad029c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.890642Z", "modified": "2026-06-14T11:56:43.890642Z", "name": "Account Discovery: Domain Account (SharpHound/ADRecon/PowerView)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1087/002", "external_id": "T1087.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--04bafd5a-d434-536d-9436-911602d63532", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.890777Z", "modified": "2026-06-14T11:56:43.890777Z", "name": "Permission Groups Discovery: Domain Groups", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1069/002", "external_id": "T1069.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--cd520a82-b681-55f1-b85d-7a920916f8df", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.890923Z", "modified": "2026-06-14T11:56:43.890923Z", "name": "Domain Trust Discovery (SharpHound/ADRecon)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1482", "external_id": "T1482" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.891076Z", "modified": "2026-06-14T11:56:43.891076Z", "name": "Software Discovery: Security Software Discovery (winpeas/Seatbelt)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1518/001", "external_id": "T1518.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--28091db6-87a8-5b9f-8e80-605a0bf6ca6a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.891245Z", "modified": "2026-06-14T11:56:43.891245Z", "name": "Access Token Manipulation: Token Impersonation/Theft (GodPotato/PrintSpoofer)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1134/001", "external_id": "T1134.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2ef7fb3b-6ed3-5341-bc14-40bb267c441f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.891402Z", "modified": "2026-06-14T11:56:43.891402Z", "name": "Access Token Manipulation: Create Process with Token (RunasCs)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1134/002", "external_id": "T1134.002" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2c8a99e6-e85d-5633-9fc5-48020c0aafce", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.891628Z", "modified": "2026-06-14T11:56:43.891628Z", "name": "Exploitation for Privilege Escalation (GodPotato/PrintSpoofer)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1068", "external_id": "T1068" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e037d666-9601-5f6d-a51c-eaf2cbc01725", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.89181Z", "modified": "2026-06-14T11:56:43.89181Z", "name": "Steal or Forge Authentication Certificates (Certify)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1649", "external_id": "T1649" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.891953Z", "modified": "2026-06-14T11:56:43.891953Z", "name": "Proxy: Internal Proxy (Ligolo-ng v0.8.3)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1090/001", "external_id": "T1090.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.892111Z", "modified": "2026-06-14T11:56:43.892111Z", "name": "Protocol Tunneling (Ligolo-ng + chisel)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1572", "external_id": "T1572" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.892252Z", "modified": "2026-06-14T11:56:43.892252Z", "name": "Application Layer Protocol: Web Protocols (AdaptixC2 HTTP C2)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1071/001", "external_id": "T1071.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--88e2313f-cf2a-59dc-8124-88e46e53b1c4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.892403Z", "modified": "2026-06-14T11:56:43.892403Z", "name": "Encrypted Channel: Symmetric Cryptography (RC4-128)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1573/001", "external_id": "T1573.001" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--44bf0bb6-4445-5791-9daa-2c0a12978bf7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.892545Z", "modified": "2026-06-14T11:56:43.892545Z", "name": "Ingress Tool Transfer (open directory hosts toolkit)", "external_references": [ { "source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1105", "external_id": "T1105" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--65f435f6-a66f-56b2-b226-340edba569de", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.892703Z", "modified": "2026-06-14T11:56:43.892703Z", "name": "opendirectory-45-130-148-125-20260430 infrastructure", "infrastructure_types": [ "command-and-control", "hosting" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d13ef7b-c9e4-539c-9247-0469299d6583", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.894817Z", "modified": "2026-06-14T11:56:43.894817Z", "relationship_type": "indicates", "source_ref": "indicator--b88583ed-5f96-51aa-a903-3c4cc6b4487e", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48b04c85-7b88-5d20-84b9-ffe8e1e694a8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.895145Z", "modified": "2026-06-14T11:56:43.895145Z", "relationship_type": "indicates", "source_ref": "indicator--ab87d42d-b67d-5448-98d1-696dff808c69", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--83972023-7aa0-58fb-a9cb-4a92e6a3bae9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.895257Z", "modified": "2026-06-14T11:56:43.895257Z", "relationship_type": "indicates", "source_ref": "indicator--fa6a1922-fa93-5ba1-bd6a-5e0a917162dc", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2a2a419-a872-59e5-9afc-8bc77d879a29", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.895453Z", "modified": "2026-06-14T11:56:43.895453Z", "relationship_type": "indicates", "source_ref": "indicator--33ca0dc9-26b9-5e29-99e9-f5e45f68de72", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--612c04b7-58a9-5931-bb6c-424c1ac1b18d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.895601Z", "modified": "2026-06-14T11:56:43.895601Z", "relationship_type": "indicates", "source_ref": "indicator--d5da48a8-19df-5f0c-8628-81de1cce9bff", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--45f5c90f-ad0b-5321-a675-3134f1d4a01d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.895771Z", "modified": "2026-06-14T11:56:43.895771Z", "relationship_type": "indicates", "source_ref": "indicator--21b9ee10-0c0b-5c2f-8b47-d1229c5798d0", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8514d5f0-1e3a-548b-9b71-5a7060609a22", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.895955Z", "modified": "2026-06-14T11:56:43.895955Z", "relationship_type": "indicates", "source_ref": "indicator--094fbbc6-536d-50a0-8f71-461cd28ab1b2", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9d647745-35ec-5d43-ae11-2da38c1a4f5f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.89612Z", "modified": "2026-06-14T11:56:43.89612Z", "relationship_type": "indicates", "source_ref": "indicator--29ee4afb-5cba-509e-a459-07bbbffd3f0f", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c194e43a-ff42-5d41-84b5-bc16b4d1e2ea", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.896284Z", "modified": "2026-06-14T11:56:43.896284Z", "relationship_type": "indicates", "source_ref": "indicator--fc496f6f-fe13-5ba1-ac33-ef3aef6ea4e8", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08852c32-cd0d-5d32-8b07-72ad6c9a44c7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.896445Z", "modified": "2026-06-14T11:56:43.896445Z", "relationship_type": "indicates", "source_ref": "indicator--d76b55fc-949f-5b1c-862b-bb6a03cff661", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1986c996-dcd5-57c1-b4a2-48b91418f61d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.896598Z", "modified": "2026-06-14T11:56:43.896598Z", "relationship_type": "indicates", "source_ref": "indicator--a5f38ce6-890d-51b2-8480-756827ab7a71", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--adcf90d7-273e-5bca-b64b-e9155504c1b7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.896781Z", "modified": "2026-06-14T11:56:43.896781Z", "relationship_type": "indicates", "source_ref": "indicator--8c8d3ca6-f2b5-5aa4-a8ec-7e4ac08edad4", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e8b1e2e9-217b-570c-a378-85856e2f93bb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.896967Z", "modified": "2026-06-14T11:56:43.896967Z", "relationship_type": "indicates", "source_ref": "indicator--605f7e43-cbbb-5cb2-afb9-ff1cbd680d6c", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--222d51b3-ef81-58eb-bc65-847d6b4698b9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.897158Z", "modified": "2026-06-14T11:56:43.897158Z", "relationship_type": "indicates", "source_ref": "indicator--9ab437d5-7db8-5569-a739-2601dc627fff", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a817a5cd-bd22-57dc-8653-56b997e25514", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.897318Z", "modified": "2026-06-14T11:56:43.897318Z", "relationship_type": "indicates", "source_ref": "indicator--38508244-0ae6-5658-95a0-b72a67ff5fa6", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32e53a79-6093-5f30-846f-052c4e0f37e3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.897479Z", "modified": "2026-06-14T11:56:43.897479Z", "relationship_type": "indicates", "source_ref": "indicator--4181004e-43ab-5584-a5ba-64753f027be3", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9505c903-781b-5184-9080-a2647cfa9334", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.897653Z", "modified": "2026-06-14T11:56:43.897653Z", "relationship_type": "indicates", "source_ref": "indicator--d923252f-185f-51c7-b2e0-a0af3c424a89", "target_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f67ede06-107f-57ef-a023-026ba7f827a5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.897817Z", "modified": "2026-06-14T11:56:43.897817Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5446c7ff-7ddf-576d-86a6-1bba667c81d6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.898014Z", "modified": "2026-06-14T11:56:43.898014Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--02618774-db21-5124-b02a-4cf9d03dba42", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.89816Z", "modified": "2026-06-14T11:56:43.89816Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--86d4700a-0ebb-52fb-9fdf-88224c58f7b6", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68e68194-bbec-565f-a526-e061219d266c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.898295Z", "modified": "2026-06-14T11:56:43.898295Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d7e2be6e-1baf-585e-a542-b797d687b377", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.898414Z", "modified": "2026-06-14T11:56:43.898414Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--8e7236ae-f640-50d6-b963-93fae62071c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6d67e98f-850d-5293-acb4-ce7f5fb97323", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.898528Z", "modified": "2026-06-14T11:56:43.898528Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6fdb71a0-b6eb-5f13-a2ae-6ba8008c57ce", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.898636Z", "modified": "2026-06-14T11:56:43.898636Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--ba61986c-2ad8-5246-8fad-deba7ea471bd", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e699d200-2324-5018-a245-fb536bb244be", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.898749Z", "modified": "2026-06-14T11:56:43.898749Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--ab386774-9556-5bc2-8927-6d98193000ec", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--99ec7dc8-e6db-5970-ac3a-b3423f721ac1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.898885Z", "modified": "2026-06-14T11:56:43.898885Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--f49f7ccf-9e42-5d58-aaa7-c46f34716f27", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48c1ab6f-8398-520c-b6d1-9d026ebba00c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.899009Z", "modified": "2026-06-14T11:56:43.899009Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--d00141fc-37fa-5b54-9d20-a7bd180eeb75", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64b3fd2b-8269-568a-958f-a2ac5c33d4c4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.899132Z", "modified": "2026-06-14T11:56:43.899132Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--35c31841-4eeb-5335-8d8f-dc05e292fdfc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6249414e-3039-5592-80fe-e24e620288d5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.899253Z", "modified": "2026-06-14T11:56:43.899253Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--cd2b8020-f743-5a86-89bd-242def0e953b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--57c31a6c-de98-588a-b2e5-e819f71ffbf5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.899373Z", "modified": "2026-06-14T11:56:43.899373Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--f023ef3b-b061-56b8-8d67-d5b66fa6c613", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--22fc8e74-2e0a-5368-958e-44be349b7ec1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.899496Z", "modified": "2026-06-14T11:56:43.899496Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--12acaf8f-029b-5f5b-8f13-47263822835a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b4eab93-1bbf-52c9-82fa-d19f7efbba10", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.899617Z", "modified": "2026-06-14T11:56:43.899617Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--ba6b8d93-c1b1-5bd3-9ebe-465b4d49164e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40a99d02-115b-5532-96e3-bb85081d0094", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.899756Z", "modified": "2026-06-14T11:56:43.899756Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--b4868fee-9a5d-56fc-a87b-bad2d374fea5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2ce87ecc-c8e9-54f8-93bf-2757f35b06d0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.899909Z", "modified": "2026-06-14T11:56:43.899909Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f80f7aa1-2cd5-584f-bd07-b1e59d574b4b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.900033Z", "modified": "2026-06-14T11:56:43.900033Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--b5995633-347d-5213-a283-22c6abbb031e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--167fadf1-23ff-56b4-8a53-d3a26fff04e1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.90015Z", "modified": "2026-06-14T11:56:43.90015Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--802d67fb-d980-5e1c-b93c-484e9ad38d10", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.900259Z", "modified": "2026-06-14T11:56:43.900259Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--2b613316-6a4f-5cbd-ad25-9e251342eb43", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18e95ac7-063f-544f-bcfa-cb92ecc5e093", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.900384Z", "modified": "2026-06-14T11:56:43.900384Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--c042587b-4ea4-50cf-9f38-f81673df9459", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--747a35a4-2e10-5cfa-8ce0-3030d7d26f79", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.900494Z", "modified": "2026-06-14T11:56:43.900494Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--80a04a9a-bbba-5ee9-a6e6-0f716517743c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.900598Z", "modified": "2026-06-14T11:56:43.900598Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb9f0a31-3c45-56a9-ad95-a1e7003e91e4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.900702Z", "modified": "2026-06-14T11:56:43.900702Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--651a17fa-733e-5f06-8be3-34f7a5144e4d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.900804Z", "modified": "2026-06-14T11:56:43.900804Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e1768f1b-ad0c-5b73-a04f-a558925915d9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.90091Z", "modified": "2026-06-14T11:56:43.90091Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d7a86987-1be1-5882-84a8-266b57d11acb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.901015Z", "modified": "2026-06-14T11:56:43.901015Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--bd2de1a2-5405-5f08-b368-3ed9ffad029c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20505b99-010c-5d57-b09b-109e2c7f0716", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.901119Z", "modified": "2026-06-14T11:56:43.901119Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--04bafd5a-d434-536d-9436-911602d63532", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7f9e671f-29c8-533a-8894-bec17a4b8157", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.901225Z", "modified": "2026-06-14T11:56:43.901225Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--cd520a82-b681-55f1-b85d-7a920916f8df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6c65746b-9a92-5296-852f-8a68f489cb45", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.901339Z", "modified": "2026-06-14T11:56:43.901339Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32b2ec06-bb8e-5aa1-b34b-55332d2cd04f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.901475Z", "modified": "2026-06-14T11:56:43.901475Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--28091db6-87a8-5b9f-8e80-605a0bf6ca6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--309ba977-f3b5-549f-80e2-4e86cda83f7b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.901663Z", "modified": "2026-06-14T11:56:43.901663Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--2ef7fb3b-6ed3-5341-bc14-40bb267c441f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c1f54375-7e4e-5a60-bbb4-a4edae427ee1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.90186Z", "modified": "2026-06-14T11:56:43.90186Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--2c8a99e6-e85d-5633-9fc5-48020c0aafce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f064e1a8-7a24-5965-96fe-4bad59205002", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.902044Z", "modified": "2026-06-14T11:56:43.902044Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--e037d666-9601-5f6d-a51c-eaf2cbc01725", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--077c49a5-f1bd-5896-a637-b121d0d42229", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.902181Z", "modified": "2026-06-14T11:56:43.902181Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d339eb02-4dd8-5e6a-9652-1980c6d55c9e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.902337Z", "modified": "2026-06-14T11:56:43.902337Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bdd14cff-582d-5917-8d1a-8ad74923756e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.902504Z", "modified": "2026-06-14T11:56:43.902504Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c802d9cf-1779-54b4-a015-987b93c175d9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.902668Z", "modified": "2026-06-14T11:56:43.902668Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--88e2313f-cf2a-59dc-8124-88e46e53b1c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ce42ad90-9dc9-521c-b51d-d244376e889c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.902861Z", "modified": "2026-06-14T11:56:43.902861Z", "relationship_type": "uses", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "attack-pattern--44bf0bb6-4445-5791-9daa-2c0a12978bf7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8d7e611c-896e-5924-8a36-cebfb5f04c06", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.903059Z", "modified": "2026-06-14T11:56:43.903059Z", "relationship_type": "communicates-with", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "infrastructure--65f435f6-a66f-56b2-b226-340edba569de", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f6f3bf3f-aaf6-568f-9a6c-bc7e5de9ecbf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.903247Z", "modified": "2026-06-14T11:56:43.903247Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ae05f32b-fa2a-5900-b85e-0a0e378dc9f1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.90341Z", "modified": "2026-06-14T11:56:43.90341Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--defffc99-036a-5f99-9217-9105448949ee", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.903569Z", "modified": "2026-06-14T11:56:43.903569Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--86d4700a-0ebb-52fb-9fdf-88224c58f7b6", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d52bb21-4110-5922-a7c0-3bac9f30ad78", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.903732Z", "modified": "2026-06-14T11:56:43.903732Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c07df3c6-2180-551c-8c32-a0c318d5329b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.903908Z", "modified": "2026-06-14T11:56:43.903908Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--8e7236ae-f640-50d6-b963-93fae62071c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ac577c5f-367a-59a5-9a28-b6a82d193aab", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.904063Z", "modified": "2026-06-14T11:56:43.904063Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aacd0f2d-35f1-5dc5-817a-bcbaf15902dc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.904199Z", "modified": "2026-06-14T11:56:43.904199Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--ba61986c-2ad8-5246-8fad-deba7ea471bd", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92ccde56-bb53-5055-b0df-acf20342e7f1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.904362Z", "modified": "2026-06-14T11:56:43.904362Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--ab386774-9556-5bc2-8927-6d98193000ec", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0c9876b6-4338-531d-b931-a31af02fc796", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.904511Z", "modified": "2026-06-14T11:56:43.904511Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--f49f7ccf-9e42-5d58-aaa7-c46f34716f27", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8c8ea81-8327-5169-8916-f5899b9a3108", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.904683Z", "modified": "2026-06-14T11:56:43.904683Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--d00141fc-37fa-5b54-9d20-a7bd180eeb75", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7fc67724-c77f-5cac-87b5-548d27ff94bb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.904858Z", "modified": "2026-06-14T11:56:43.904858Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--35c31841-4eeb-5335-8d8f-dc05e292fdfc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f930af6-7def-5d40-b60a-373c9f93e955", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.905037Z", "modified": "2026-06-14T11:56:43.905037Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--cd2b8020-f743-5a86-89bd-242def0e953b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b8459a07-2df0-57d2-9019-25a75ead5599", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.90523Z", "modified": "2026-06-14T11:56:43.90523Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--f023ef3b-b061-56b8-8d67-d5b66fa6c613", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--02990d5c-206d-52ce-a44c-46c69c034179", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.905381Z", "modified": "2026-06-14T11:56:43.905381Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--12acaf8f-029b-5f5b-8f13-47263822835a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e59078d4-c289-5fb8-84c3-243accfe1fdd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.905499Z", "modified": "2026-06-14T11:56:43.905499Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--ba6b8d93-c1b1-5bd3-9ebe-465b4d49164e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b8306c05-5d37-5e19-a18f-e699cfcd6010", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.905629Z", "modified": "2026-06-14T11:56:43.905629Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--b4868fee-9a5d-56fc-a87b-bad2d374fea5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40f0cac4-74cf-5d35-952f-17ef4ca7bfbd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.905742Z", "modified": "2026-06-14T11:56:43.905742Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8dc1d5c-0e09-50e6-a9fa-01f64b6c75fa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.905878Z", "modified": "2026-06-14T11:56:43.905878Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--b5995633-347d-5213-a283-22c6abbb031e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb99c784-9e0d-51da-a7fc-4d446cb4e1d5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.905993Z", "modified": "2026-06-14T11:56:43.905993Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dfdba767-be43-55e8-8a6f-f5b7eb4c2f46", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.9061Z", "modified": "2026-06-14T11:56:43.9061Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--2b613316-6a4f-5cbd-ad25-9e251342eb43", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b6eb6c5-0963-5bd2-856c-6f4f29639156", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.906214Z", "modified": "2026-06-14T11:56:43.906214Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--c042587b-4ea4-50cf-9f38-f81673df9459", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f8219ac-3998-53df-a526-908880c6f4ec", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.906326Z", "modified": "2026-06-14T11:56:43.906326Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0846380a-308b-5939-b433-c4452e9752a9", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.90643Z", "modified": "2026-06-14T11:56:43.90643Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7fe1f8d5-669d-53bc-844b-aa231f3f1979", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.906534Z", "modified": "2026-06-14T11:56:43.906534Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--78259e36-2e48-5e50-839e-b92d507b00b8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.906637Z", "modified": "2026-06-14T11:56:43.906637Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--049b2c91-a6df-5dab-b83b-a5bae9f40031", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.906741Z", "modified": "2026-06-14T11:56:43.906741Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c702900b-68d0-5048-a4d4-9825d93e6083", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.906846Z", "modified": "2026-06-14T11:56:43.906846Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--bd2de1a2-5405-5f08-b368-3ed9ffad029c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2953cb6-b420-5f73-afea-605aa851e28d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.906949Z", "modified": "2026-06-14T11:56:43.906949Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--04bafd5a-d434-536d-9436-911602d63532", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c8f48deb-60f0-535f-af1d-55a002a5d560", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.907051Z", "modified": "2026-06-14T11:56:43.907051Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--cd520a82-b681-55f1-b85d-7a920916f8df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a941f838-17fb-5441-b866-28e77c9fb474", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.907152Z", "modified": "2026-06-14T11:56:43.907152Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--25c1e2f4-53ca-50a2-9023-baf91c69f49f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.907257Z", "modified": "2026-06-14T11:56:43.907257Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--28091db6-87a8-5b9f-8e80-605a0bf6ca6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b906f5e-3505-5633-a653-8df6494c4786", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.907361Z", "modified": "2026-06-14T11:56:43.907361Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--2ef7fb3b-6ed3-5341-bc14-40bb267c441f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6df16147-0894-54d8-8b26-b856a8af0284", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.907486Z", "modified": "2026-06-14T11:56:43.907486Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--2c8a99e6-e85d-5633-9fc5-48020c0aafce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f75672ff-95bf-5c74-af37-5a33397f674e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.907634Z", "modified": "2026-06-14T11:56:43.907634Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--e037d666-9601-5f6d-a51c-eaf2cbc01725", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb0f8588-7b71-5710-816a-a9d4f1be0dbc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.90782Z", "modified": "2026-06-14T11:56:43.90782Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4a4fbd31-3e68-54d8-87cb-c573f89498f3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.908021Z", "modified": "2026-06-14T11:56:43.908021Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--46414701-8932-53cd-9ede-a22f630671e8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.908188Z", "modified": "2026-06-14T11:56:43.908188Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1029cc3-99dd-5a39-9a24-43d53ddacfac", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.908302Z", "modified": "2026-06-14T11:56:43.908302Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--88e2313f-cf2a-59dc-8124-88e46e53b1c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--74e49430-5498-57f8-90f6-860b20cd7f37", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.908464Z", "modified": "2026-06-14T11:56:43.908464Z", "relationship_type": "uses", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "attack-pattern--44bf0bb6-4445-5791-9daa-2c0a12978bf7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c991679a-54cb-5beb-978c-e3cfdfe10a7e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.908626Z", "modified": "2026-06-14T11:56:43.908626Z", "relationship_type": "communicates-with", "source_ref": "malware--f8422077-3973-5026-80e8-7901120a07a4", "target_ref": "infrastructure--65f435f6-a66f-56b2-b226-340edba569de", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca80cc30-d3a0-57ee-a31d-02d46f272250", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.908796Z", "modified": "2026-06-14T11:56:43.908796Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3ae8fdce-d5f5-5757-af62-9940652aaa05", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.909006Z", "modified": "2026-06-14T11:56:43.909006Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--492542fb-c061-55f1-b21f-7cd41e5b4d40", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.909482Z", "modified": "2026-06-14T11:56:43.909482Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--86d4700a-0ebb-52fb-9fdf-88224c58f7b6", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--71c0cfc4-babc-53ae-899c-dc955328de6a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.909646Z", "modified": "2026-06-14T11:56:43.909646Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cfb2eb92-906b-5331-aa2f-417c6b9a9f86", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.90981Z", "modified": "2026-06-14T11:56:43.90981Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--8e7236ae-f640-50d6-b963-93fae62071c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ccfc3084-a5ab-5120-8733-e64f94707b05", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.909985Z", "modified": "2026-06-14T11:56:43.909985Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--76c04675-ab21-5064-a9ea-30c7b19e6ce3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.910095Z", "modified": "2026-06-14T11:56:43.910095Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--ba61986c-2ad8-5246-8fad-deba7ea471bd", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--30890469-c5f9-5541-8e11-4e44b060dc17", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.910199Z", "modified": "2026-06-14T11:56:43.910199Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--ab386774-9556-5bc2-8927-6d98193000ec", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--42c09aac-6f83-5aa2-a48d-a44d1f5ac917", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.910351Z", "modified": "2026-06-14T11:56:43.910351Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--f49f7ccf-9e42-5d58-aaa7-c46f34716f27", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a0ed56f7-65eb-5db9-b8a6-4556e9569f67", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.910486Z", "modified": "2026-06-14T11:56:43.910486Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--d00141fc-37fa-5b54-9d20-a7bd180eeb75", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb5554c4-c655-5fb8-8135-6354afddf6df", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.91062Z", "modified": "2026-06-14T11:56:43.91062Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--35c31841-4eeb-5335-8d8f-dc05e292fdfc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--febcbdce-b112-5961-91dc-48e76a355787", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.9108Z", "modified": "2026-06-14T11:56:43.9108Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--cd2b8020-f743-5a86-89bd-242def0e953b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--621963f3-ad69-5ac2-8095-74e9c790ab2f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.91093Z", "modified": "2026-06-14T11:56:43.91093Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--f023ef3b-b061-56b8-8d67-d5b66fa6c613", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d6fa7bd4-6883-5432-8591-65f928a89ee2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.911088Z", "modified": "2026-06-14T11:56:43.911088Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--12acaf8f-029b-5f5b-8f13-47263822835a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--940495e8-0a3e-5ee4-9247-117364541de3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.91127Z", "modified": "2026-06-14T11:56:43.91127Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--ba6b8d93-c1b1-5bd3-9ebe-465b4d49164e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d6519e2c-a67d-5bf3-ae10-5a0f88771a34", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.911463Z", "modified": "2026-06-14T11:56:43.911463Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--b4868fee-9a5d-56fc-a87b-bad2d374fea5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--16d58d6f-66c4-5212-85a8-16ec056ac276", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.911587Z", "modified": "2026-06-14T11:56:43.911587Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--94295ebf-376f-5fc7-ae85-806ee5f2bf89", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.911703Z", "modified": "2026-06-14T11:56:43.911703Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--b5995633-347d-5213-a283-22c6abbb031e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1ad5134-13e7-55eb-ac8f-307edf2977c0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.911815Z", "modified": "2026-06-14T11:56:43.911815Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b072625e-2b9d-5fc7-9308-6a2fc08a2afc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.911953Z", "modified": "2026-06-14T11:56:43.911953Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--2b613316-6a4f-5cbd-ad25-9e251342eb43", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--286bdb83-2803-5209-9bd9-82abf1e01216", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.912083Z", "modified": "2026-06-14T11:56:43.912083Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--c042587b-4ea4-50cf-9f38-f81673df9459", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9e3b521-66fe-58fa-9bcc-3fae35a89f33", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.912206Z", "modified": "2026-06-14T11:56:43.912206Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--051be214-f537-5bc2-9c97-2c5267d8a408", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.912319Z", "modified": "2026-06-14T11:56:43.912319Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--272017f9-052e-517a-95a8-155c27d522aa", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.912426Z", "modified": "2026-06-14T11:56:43.912426Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c1ad432-67f9-5730-bbe6-6b174eb5a5a8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.912534Z", "modified": "2026-06-14T11:56:43.912534Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0d6a0b56-7d86-5877-8d38-6e958782a1f8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.912639Z", "modified": "2026-06-14T11:56:43.912639Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c9c70644-c69a-5db7-aa24-1eb9d893bb8d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.912767Z", "modified": "2026-06-14T11:56:43.912767Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--bd2de1a2-5405-5f08-b368-3ed9ffad029c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--14085932-6db7-5998-a5cd-0dc4f6a163ff", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.912873Z", "modified": "2026-06-14T11:56:43.912873Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--04bafd5a-d434-536d-9436-911602d63532", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--994597d8-32fb-5b45-8829-51d57e60863f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.912974Z", "modified": "2026-06-14T11:56:43.912974Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--cd520a82-b681-55f1-b85d-7a920916f8df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8b2a4c41-8003-5001-a4dd-85f622f15c1e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.913076Z", "modified": "2026-06-14T11:56:43.913076Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--121b01cf-8f8c-58d4-bff5-850cabfedac1", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.913179Z", "modified": "2026-06-14T11:56:43.913179Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--28091db6-87a8-5b9f-8e80-605a0bf6ca6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dad7d7dd-8b89-5d66-8f71-698cef55298b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.913284Z", "modified": "2026-06-14T11:56:43.913284Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--2ef7fb3b-6ed3-5341-bc14-40bb267c441f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7ae59b73-cb99-5641-8bc7-1c2d1b732c9b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.91339Z", "modified": "2026-06-14T11:56:43.91339Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--2c8a99e6-e85d-5633-9fc5-48020c0aafce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4d1200ee-07ae-59b1-8100-8704b36f923a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.913508Z", "modified": "2026-06-14T11:56:43.913508Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--e037d666-9601-5f6d-a51c-eaf2cbc01725", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--82a1ad99-9f54-51b4-93bc-e0c0fc714484", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.913648Z", "modified": "2026-06-14T11:56:43.913648Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5c2b81a-5cb3-5b7a-a6da-6781fee3708a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.913767Z", "modified": "2026-06-14T11:56:43.913767Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4d664a89-88e4-5fb2-ad67-2804a8bd8e51", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.913882Z", "modified": "2026-06-14T11:56:43.913882Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--acbe8ef0-5781-5c23-898a-365e9d55f3cc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.914006Z", "modified": "2026-06-14T11:56:43.914006Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--88e2313f-cf2a-59dc-8124-88e46e53b1c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d3dab23-9a23-59ac-bf81-9a16fa48c92f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.914122Z", "modified": "2026-06-14T11:56:43.914122Z", "relationship_type": "uses", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "attack-pattern--44bf0bb6-4445-5791-9daa-2c0a12978bf7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d55b042-e61d-56ce-9e7f-5ed7b64aff2c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.914239Z", "modified": "2026-06-14T11:56:43.914239Z", "relationship_type": "communicates-with", "source_ref": "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "target_ref": "infrastructure--65f435f6-a66f-56b2-b226-340edba569de", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5b1e2ed1-146b-50c7-9950-0a1df48d090f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.914365Z", "modified": "2026-06-14T11:56:43.914365Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c039f68-0b78-500e-aea5-878f32fdaead", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.91451Z", "modified": "2026-06-14T11:56:43.91451Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c502d626-e084-5ec3-8bf1-b577ecb9b1d5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.914686Z", "modified": "2026-06-14T11:56:43.914686Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--86d4700a-0ebb-52fb-9fdf-88224c58f7b6", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--afade7e3-7d7c-5a6a-b1e1-9e5a5cec8b38", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.914875Z", "modified": "2026-06-14T11:56:43.914875Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca6db606-a6cd-5a88-a60f-8c5354146201", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.915081Z", "modified": "2026-06-14T11:56:43.915081Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--8e7236ae-f640-50d6-b963-93fae62071c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ef22504-5b7b-5439-bc1e-ede5f05c629e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.915261Z", "modified": "2026-06-14T11:56:43.915261Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f59136bc-331a-5abe-b932-727e490119d7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.915433Z", "modified": "2026-06-14T11:56:43.915433Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--ba61986c-2ad8-5246-8fad-deba7ea471bd", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d7cfdccb-b828-5a55-943f-50b695d52663", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.915596Z", "modified": "2026-06-14T11:56:43.915596Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--ab386774-9556-5bc2-8927-6d98193000ec", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c40a949-feb0-5537-8970-ceb93f4be787", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.915759Z", "modified": "2026-06-14T11:56:43.915759Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--f49f7ccf-9e42-5d58-aaa7-c46f34716f27", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6c360369-6c9c-578d-932f-c651edba247e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.915934Z", "modified": "2026-06-14T11:56:43.915934Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--d00141fc-37fa-5b54-9d20-a7bd180eeb75", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--21853f40-357b-5ebc-a7a2-b149c61d6c22", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.916106Z", "modified": "2026-06-14T11:56:43.916106Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--35c31841-4eeb-5335-8d8f-dc05e292fdfc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aae90974-1a5d-5aa8-8072-06e4efbe591a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.916269Z", "modified": "2026-06-14T11:56:43.916269Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--cd2b8020-f743-5a86-89bd-242def0e953b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--43f93bc0-0d89-5a84-91bc-c248299c2f70", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.916418Z", "modified": "2026-06-14T11:56:43.916418Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--f023ef3b-b061-56b8-8d67-d5b66fa6c613", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--61dbc6ec-a90c-5b2b-9bbb-548475757cf2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.916573Z", "modified": "2026-06-14T11:56:43.916573Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--12acaf8f-029b-5f5b-8f13-47263822835a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bbe0afff-468e-5dac-9de4-4b5ed0a4d838", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.916728Z", "modified": "2026-06-14T11:56:43.916728Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--ba6b8d93-c1b1-5bd3-9ebe-465b4d49164e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--23a9a58e-137f-50ab-8a2e-6df807f287ec", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.916896Z", "modified": "2026-06-14T11:56:43.916896Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--b4868fee-9a5d-56fc-a87b-bad2d374fea5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd6b54c4-7409-5f37-a036-bce921203c14", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.917075Z", "modified": "2026-06-14T11:56:43.917075Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7b224111-ec98-505c-a750-b23139fab269", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.917258Z", "modified": "2026-06-14T11:56:43.917258Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--b5995633-347d-5213-a283-22c6abbb031e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09d7b376-255f-5adb-8311-df67b896a13f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.917435Z", "modified": "2026-06-14T11:56:43.917435Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7a32f5b8-8081-50f1-b4bb-dab5276ce6cb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.917613Z", "modified": "2026-06-14T11:56:43.917613Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--2b613316-6a4f-5cbd-ad25-9e251342eb43", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e092edc9-ba4d-5c11-82d3-7c6cdfd399f7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.917802Z", "modified": "2026-06-14T11:56:43.917802Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--c042587b-4ea4-50cf-9f38-f81673df9459", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5ccc35f-c8f7-5550-9d71-7ac1b3a609f5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.917993Z", "modified": "2026-06-14T11:56:43.917993Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4a638a53-e8ee-5da8-8b34-d467cd0496ad", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.918164Z", "modified": "2026-06-14T11:56:43.918164Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b94a6fc-9241-5a7a-9c4f-36f9d1ca3e6a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.918335Z", "modified": "2026-06-14T11:56:43.918335Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f127ad88-db03-5a92-9c6e-955869842a94", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.918507Z", "modified": "2026-06-14T11:56:43.918507Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--046ee21c-00e4-5323-b21c-4e4e2952984f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.918653Z", "modified": "2026-06-14T11:56:43.918653Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--52ffb640-e142-50d9-a545-f60c899e0f5c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.918763Z", "modified": "2026-06-14T11:56:43.918763Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--bd2de1a2-5405-5f08-b368-3ed9ffad029c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2f911c8-358e-5ece-ad90-1434fb0ac181", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.918869Z", "modified": "2026-06-14T11:56:43.918869Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--04bafd5a-d434-536d-9436-911602d63532", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a4459efa-42a0-5dd9-bb7b-a76683e9ffbf", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.918974Z", "modified": "2026-06-14T11:56:43.918974Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--cd520a82-b681-55f1-b85d-7a920916f8df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8bb16739-0b09-5e25-8960-97bc12b96774", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.919077Z", "modified": "2026-06-14T11:56:43.919077Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4bd92b7-89d7-5247-bad1-e972a544a99e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.919181Z", "modified": "2026-06-14T11:56:43.919181Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--28091db6-87a8-5b9f-8e80-605a0bf6ca6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48572d41-103e-5f3a-8198-1ea326a92d04", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.919283Z", "modified": "2026-06-14T11:56:43.919283Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--2ef7fb3b-6ed3-5341-bc14-40bb267c441f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--71391274-d611-521e-bc77-f686d902c453", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.919385Z", "modified": "2026-06-14T11:56:43.919385Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--2c8a99e6-e85d-5633-9fc5-48020c0aafce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9f94e9ad-457c-511f-aecd-051a4656f065", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.919487Z", "modified": "2026-06-14T11:56:43.919487Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--e037d666-9601-5f6d-a51c-eaf2cbc01725", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bbf5f06c-95fc-5aea-bc0a-41ef8b24c280", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.919608Z", "modified": "2026-06-14T11:56:43.919608Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--78c42c72-56c9-5e4e-b0c3-79d128e8a958", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.919766Z", "modified": "2026-06-14T11:56:43.919766Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8eb1b1b-6fb3-5097-9eec-3e668ae9a26d", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.919953Z", "modified": "2026-06-14T11:56:43.919953Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a8fbc96e-85b2-5ea8-8447-5b5ea21afb95", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.920127Z", "modified": "2026-06-14T11:56:43.920127Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--88e2313f-cf2a-59dc-8124-88e46e53b1c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0c4fd289-1094-5225-87d4-a77177ae4072", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.920296Z", "modified": "2026-06-14T11:56:43.920296Z", "relationship_type": "uses", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "attack-pattern--44bf0bb6-4445-5791-9daa-2c0a12978bf7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4c028cbe-61a8-5baa-82c1-8f7ef0ecb171", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.920471Z", "modified": "2026-06-14T11:56:43.920471Z", "relationship_type": "communicates-with", "source_ref": "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "target_ref": "infrastructure--65f435f6-a66f-56b2-b226-340edba569de", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e41becfd-da7d-5e1f-a5e8-102fad8c2c79", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.920644Z", "modified": "2026-06-14T11:56:43.920644Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e321811f-eb23-5a9a-90f5-f7de970209fe", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.920821Z", "modified": "2026-06-14T11:56:43.920821Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--88b89574-1639-552a-859b-c9256ee749d5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.920988Z", "modified": "2026-06-14T11:56:43.920988Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--86d4700a-0ebb-52fb-9fdf-88224c58f7b6", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5db2dc78-27cd-5dbd-8889-d78d7b035755", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.921168Z", "modified": "2026-06-14T11:56:43.921168Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5f0e899-af28-5115-97e7-e018c25ace8a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.921349Z", "modified": "2026-06-14T11:56:43.921349Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--8e7236ae-f640-50d6-b963-93fae62071c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--93e16a21-5841-5765-9bcc-1d11b9031db5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.921522Z", "modified": "2026-06-14T11:56:43.921522Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--af1aa11a-d460-5df5-ba01-e46a4ee5b870", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.921695Z", "modified": "2026-06-14T11:56:43.921695Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--ba61986c-2ad8-5246-8fad-deba7ea471bd", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--391f5ef2-c0dd-54c5-b3e1-25a9f569fba6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.921881Z", "modified": "2026-06-14T11:56:43.921881Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--ab386774-9556-5bc2-8927-6d98193000ec", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee526cad-25ac-578d-8307-36b058190769", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.92208Z", "modified": "2026-06-14T11:56:43.92208Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--f49f7ccf-9e42-5d58-aaa7-c46f34716f27", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a46b7861-24dc-5930-a784-a9142ae4f0b0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.922244Z", "modified": "2026-06-14T11:56:43.922244Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--d00141fc-37fa-5b54-9d20-a7bd180eeb75", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fbc6223f-8d5e-5906-b91a-f790c313fed0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.922408Z", "modified": "2026-06-14T11:56:43.922408Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--35c31841-4eeb-5335-8d8f-dc05e292fdfc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3707a2ff-df96-5312-9d90-0d28c9316b9f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.922568Z", "modified": "2026-06-14T11:56:43.922568Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--cd2b8020-f743-5a86-89bd-242def0e953b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f558a751-e45a-5c65-be7e-80cbd38d5314", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.922757Z", "modified": "2026-06-14T11:56:43.922757Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--f023ef3b-b061-56b8-8d67-d5b66fa6c613", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--abedaa66-5592-55cf-9e78-8cb5306571e5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.922943Z", "modified": "2026-06-14T11:56:43.922943Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--12acaf8f-029b-5f5b-8f13-47263822835a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e7cd7a5-0bf6-5da4-b38b-eedf1253365e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.923136Z", "modified": "2026-06-14T11:56:43.923136Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--ba6b8d93-c1b1-5bd3-9ebe-465b4d49164e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5234c2e-2a89-5bb6-9954-b55f92c3fb81", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.923339Z", "modified": "2026-06-14T11:56:43.923339Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--b4868fee-9a5d-56fc-a87b-bad2d374fea5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7985fffd-84a7-5a17-855f-680ee275b1b8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.923537Z", "modified": "2026-06-14T11:56:43.923537Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97eeb244-c055-50e2-a9c7-93ea74c98bd8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.923731Z", "modified": "2026-06-14T11:56:43.923731Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--b5995633-347d-5213-a283-22c6abbb031e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4f83744-67b1-5c84-93e0-57fabd585a26", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.92392Z", "modified": "2026-06-14T11:56:43.92392Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4f8be8ae-6bd4-5a93-946b-316ba2b7808e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.924141Z", "modified": "2026-06-14T11:56:43.924141Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--2b613316-6a4f-5cbd-ad25-9e251342eb43", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--56add661-b5a7-5ea6-9b3a-56430486f94b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.924297Z", "modified": "2026-06-14T11:56:43.924297Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--c042587b-4ea4-50cf-9f38-f81673df9459", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--17a86235-c383-53b9-b127-7100245340d2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.924417Z", "modified": "2026-06-14T11:56:43.924417Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--30595e62-4a4b-5d78-b341-d4636c103d3a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.924625Z", "modified": "2026-06-14T11:56:43.924625Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e6edf3f-0b9c-521c-b636-2ea4fdbb30da", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.924758Z", "modified": "2026-06-14T11:56:43.924758Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--43326e3b-9988-5ddc-9dde-08a6432e17ba", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.924874Z", "modified": "2026-06-14T11:56:43.924874Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8044c435-1dd4-5e4d-9005-08f95fa39902", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.924982Z", "modified": "2026-06-14T11:56:43.924982Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8bbf3afa-a480-5925-89ba-680cd9233652", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.925087Z", "modified": "2026-06-14T11:56:43.925087Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--bd2de1a2-5405-5f08-b368-3ed9ffad029c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--39bad9cf-3eec-523c-8fee-a61d29cd36bd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.925193Z", "modified": "2026-06-14T11:56:43.925193Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--04bafd5a-d434-536d-9436-911602d63532", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--554b84c7-6260-584c-ae96-edee08b75adb", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.925299Z", "modified": "2026-06-14T11:56:43.925299Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--cd520a82-b681-55f1-b85d-7a920916f8df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba1f3137-c7ab-57ad-8fda-e1262f5c1e64", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.925421Z", "modified": "2026-06-14T11:56:43.925421Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b9674c9-2e03-5b14-ba99-41e75c600557", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.925527Z", "modified": "2026-06-14T11:56:43.925527Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--28091db6-87a8-5b9f-8e80-605a0bf6ca6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c322237-ffc5-5bdf-bd37-4ff9094ee89c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.925646Z", "modified": "2026-06-14T11:56:43.925646Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--2ef7fb3b-6ed3-5341-bc14-40bb267c441f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b481c55-5fea-51c7-9899-d020f3947fc8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.925768Z", "modified": "2026-06-14T11:56:43.925768Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--2c8a99e6-e85d-5633-9fc5-48020c0aafce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc567fd3-2de1-546d-8700-61c60e6e693b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.925877Z", "modified": "2026-06-14T11:56:43.925877Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--e037d666-9601-5f6d-a51c-eaf2cbc01725", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb55c1af-a833-5fb6-99ca-cc086b933b40", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.925987Z", "modified": "2026-06-14T11:56:43.925987Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b870c85f-3a1b-5ec1-98d1-9c05dc8ebbfe", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.926102Z", "modified": "2026-06-14T11:56:43.926102Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5b06536e-4096-5cba-abc3-e40247fb3511", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.926228Z", "modified": "2026-06-14T11:56:43.926228Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--98d7dd69-4e08-5944-82ce-427cabd1fd61", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.926344Z", "modified": "2026-06-14T11:56:43.926344Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--88e2313f-cf2a-59dc-8124-88e46e53b1c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0728790e-3730-55b3-bf14-e72a5e9eb388", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.926454Z", "modified": "2026-06-14T11:56:43.926454Z", "relationship_type": "uses", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "attack-pattern--44bf0bb6-4445-5791-9daa-2c0a12978bf7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--24213b6a-5e80-59b9-a39d-867caedb2673", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.926584Z", "modified": "2026-06-14T11:56:43.926584Z", "relationship_type": "communicates-with", "source_ref": "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "target_ref": "infrastructure--65f435f6-a66f-56b2-b226-340edba569de", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2021b380-2bba-55a1-a846-66cf98f3c7ba", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.926755Z", "modified": "2026-06-14T11:56:43.926755Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a506bc11-35f9-55f7-a93c-1df21940fdd7", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.926919Z", "modified": "2026-06-14T11:56:43.926919Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e9b870be-c095-52d3-83e0-56a74c128e57", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.927092Z", "modified": "2026-06-14T11:56:43.927092Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--86d4700a-0ebb-52fb-9fdf-88224c58f7b6", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5b17e05f-251f-5aae-b243-850240607f72", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.927278Z", "modified": "2026-06-14T11:56:43.927278Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e622a31-7be4-55f8-a843-f779f13ddf6e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.927455Z", "modified": "2026-06-14T11:56:43.927455Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--8e7236ae-f640-50d6-b963-93fae62071c7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--904145d2-ccd2-59bc-9ce1-8f6ec77a17ec", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.927618Z", "modified": "2026-06-14T11:56:43.927618Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--74797931-57dd-54c1-ac31-d60b8103e59e", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.927777Z", "modified": "2026-06-14T11:56:43.927777Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--ba61986c-2ad8-5246-8fad-deba7ea471bd", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a8b952d5-83b1-5929-a055-d9d22c758c75", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.927931Z", "modified": "2026-06-14T11:56:43.927931Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--ab386774-9556-5bc2-8927-6d98193000ec", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32449b5c-919a-57ec-913c-cf5f43678f26", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.928097Z", "modified": "2026-06-14T11:56:43.928097Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--f49f7ccf-9e42-5d58-aaa7-c46f34716f27", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6ca25c89-7273-5f73-a8ad-2cadbaf0acbc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.928278Z", "modified": "2026-06-14T11:56:43.928278Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--d00141fc-37fa-5b54-9d20-a7bd180eeb75", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7fb00654-078f-52ff-8a4b-159ed7a85924", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.928438Z", "modified": "2026-06-14T11:56:43.928438Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--35c31841-4eeb-5335-8d8f-dc05e292fdfc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--13a42f24-9a12-5ee6-b807-f6f452925555", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.928547Z", "modified": "2026-06-14T11:56:43.928547Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--cd2b8020-f743-5a86-89bd-242def0e953b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5b80f4e-04a4-59f7-8c5f-310d8402cd6a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.928663Z", "modified": "2026-06-14T11:56:43.928663Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--f023ef3b-b061-56b8-8d67-d5b66fa6c613", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9148fb8-81b3-5132-8e11-f9c0f07234be", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.928777Z", "modified": "2026-06-14T11:56:43.928777Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--12acaf8f-029b-5f5b-8f13-47263822835a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe0284bb-0a57-5545-8e35-23645d82b878", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.928895Z", "modified": "2026-06-14T11:56:43.928895Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--ba6b8d93-c1b1-5bd3-9ebe-465b4d49164e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47d9ca7f-a7a0-5948-b736-ccfc1e9163fc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.929017Z", "modified": "2026-06-14T11:56:43.929017Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--b4868fee-9a5d-56fc-a87b-bad2d374fea5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--37466d64-24a4-5f7d-b14d-7ee30e3b025f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.929132Z", "modified": "2026-06-14T11:56:43.929132Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68f920e3-2f32-5e73-9ae9-4f786b5f6e49", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.929247Z", "modified": "2026-06-14T11:56:43.929247Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--b5995633-347d-5213-a283-22c6abbb031e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cead1860-0e30-5462-9e35-3245c2e0aeba", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.929364Z", "modified": "2026-06-14T11:56:43.929364Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc890a33-dc13-58f4-a820-a7ed5e34f555", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.929498Z", "modified": "2026-06-14T11:56:43.929498Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--2b613316-6a4f-5cbd-ad25-9e251342eb43", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d3ba2e1c-60d1-5286-b75e-918177b005e4", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.929643Z", "modified": "2026-06-14T11:56:43.929643Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--c042587b-4ea4-50cf-9f38-f81673df9459", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f60ba3ba-5012-5aa1-b8a8-5e750f09b281", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.929761Z", "modified": "2026-06-14T11:56:43.929761Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--86ed7d93-ca2b-5308-bb87-51fce3fda728", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.929901Z", "modified": "2026-06-14T11:56:43.929901Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--81a78c3b-05cb-5833-93c6-6a8ece257770", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.930032Z", "modified": "2026-06-14T11:56:43.930032Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4e56cdcd-b363-5ce9-b690-c78549305eac", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.930151Z", "modified": "2026-06-14T11:56:43.930151Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--073830d1-47c5-579d-b5d6-e8df66472099", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.930286Z", "modified": "2026-06-14T11:56:43.930286Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7da81b1c-d785-5071-a4c1-5fc5aaedf2e0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.930396Z", "modified": "2026-06-14T11:56:43.930396Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--bd2de1a2-5405-5f08-b368-3ed9ffad029c", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2862ff17-09ea-5397-bc1f-4f74127a0e3a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.930505Z", "modified": "2026-06-14T11:56:43.930505Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--04bafd5a-d434-536d-9436-911602d63532", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--867f7526-4d03-534d-96c0-7828d68feae5", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.930613Z", "modified": "2026-06-14T11:56:43.930613Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--cd520a82-b681-55f1-b85d-7a920916f8df", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a145830e-528b-5d52-8cc3-fb9591959bf3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.930717Z", "modified": "2026-06-14T11:56:43.930717Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0cec4c76-0b45-57d3-b0a2-b1d1ecbce087", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.930822Z", "modified": "2026-06-14T11:56:43.930822Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--28091db6-87a8-5b9f-8e80-605a0bf6ca6a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb983d3c-c90d-5b6d-9127-3214643eb0f2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.93094Z", "modified": "2026-06-14T11:56:43.93094Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--2ef7fb3b-6ed3-5341-bc14-40bb267c441f", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--410c3d39-500e-52a4-b8e8-e59eace1342c", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.931061Z", "modified": "2026-06-14T11:56:43.931061Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--2c8a99e6-e85d-5633-9fc5-48020c0aafce", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--df6d72f1-23ba-5834-90a0-e854e449d9ed", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.931178Z", "modified": "2026-06-14T11:56:43.931178Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--e037d666-9601-5f6d-a51c-eaf2cbc01725", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0b71cdc3-23f0-5dff-b387-2e208ef6b181", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.931289Z", "modified": "2026-06-14T11:56:43.931289Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--638f59c6-ebb0-5284-baf1-2655cc8c36dc", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.931398Z", "modified": "2026-06-14T11:56:43.931398Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--308cee0d-5e29-55b9-b489-06f6be050b6b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.931508Z", "modified": "2026-06-14T11:56:43.931508Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96a2102f-e3c6-5c50-bfc4-941ac2e11900", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.931615Z", "modified": "2026-06-14T11:56:43.931615Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--88e2313f-cf2a-59dc-8124-88e46e53b1c4", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--81beea90-002e-5ad7-8285-cb40b05667a3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.931735Z", "modified": "2026-06-14T11:56:43.931735Z", "relationship_type": "uses", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "attack-pattern--44bf0bb6-4445-5791-9daa-2c0a12978bf7", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e8c09d7-d30c-5175-b413-f66302d0f007", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.931868Z", "modified": "2026-06-14T11:56:43.931868Z", "relationship_type": "communicates-with", "source_ref": "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "target_ref": "infrastructure--65f435f6-a66f-56b2-b226-340edba569de", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--05a29a13-3ba2-5f20-81c3-be6016c7bcd8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.931993Z", "modified": "2026-06-14T11:56:43.931993Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--7a9a84a0-8108-5fb4-bbbe-f459b8fa9104", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ea5455c-adcd-53a3-8c5b-c7161012a325", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.932242Z", "modified": "2026-06-14T11:56:43.932242Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--add3e1b8-9529-5d6a-8720-9e808ffccbf1", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--901c3628-b3e2-537f-aaf2-1ad1d32d01c8", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.932469Z", "modified": "2026-06-14T11:56:43.932469Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--806a5614-3e4a-5f72-a615-d20117a6799a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5698400-267f-5fbc-b45d-18aaa72a7f51", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.932572Z", "modified": "2026-06-14T11:56:43.932572Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--87db9afe-d2c1-5bad-baf6-da5306378d99", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--309267af-63df-58f3-bc92-4c177d398e87", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.932675Z", "modified": "2026-06-14T11:56:43.932675Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--0e9732c6-b4ee-57a3-9321-feb6be429f83", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cfb72aba-c972-53c5-9b0d-bf1378683229", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.932789Z", "modified": "2026-06-14T11:56:43.932789Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--18d35a6c-cfe2-518f-b09f-dae32f89b16e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1a675b33-85bf-5908-8c7b-f38efeb7da4a", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.9329Z", "modified": "2026-06-14T11:56:43.9329Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--57326b47-1490-5933-9558-26d087f7f406", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e58a952-51c0-5ffa-8443-7e1de79d5513", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.93301Z", "modified": "2026-06-14T11:56:43.93301Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--e6bed0fd-480d-5525-b819-95ce8cc76e60", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--82cc2f23-ce80-50ed-a88b-c3bada24a7b2", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.933127Z", "modified": "2026-06-14T11:56:43.933127Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--b0e66980-03a7-5247-a1f9-a321396f58d3", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6d6f2887-b565-53bd-9495-b4bfbbc103c3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.933235Z", "modified": "2026-06-14T11:56:43.933235Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--8bc64dad-8c41-5dde-985e-1edc8662d9af", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a9572d8-c6df-5743-b459-ca6e30bc1035", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.933353Z", "modified": "2026-06-14T11:56:43.933353Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--6ff5555a-2aad-5fda-8a8f-e43c09a742cf", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1f5551af-e121-5e7c-b1e8-3ce0002cff42", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.933466Z", "modified": "2026-06-14T11:56:43.933466Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--59ed6ee2-fccc-5d50-8ae5-95374efd253e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cd277526-e110-5a40-9c36-16a53b001ef3", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.933593Z", "modified": "2026-06-14T11:56:43.933593Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--a4e59458-e79e-506a-a2da-c3595d8c4e5b", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e00e6a0-0953-536d-ad3b-11f40d2c45e0", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.93372Z", "modified": "2026-06-14T11:56:43.93372Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--14b58e6c-ad1b-500c-874a-23af4f198636", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--296e08a0-8800-52a8-ae31-ba70756c6ee6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.933838Z", "modified": "2026-06-14T11:56:43.933838Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--12d2d754-b3ea-5984-bc77-aacde638e054", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b7bf7b92-41a4-5015-af8c-8bf6d64c9b5f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.934065Z", "modified": "2026-06-14T11:56:43.934065Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--4be062fe-6b91-5a77-bb56-db5584e2a233", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--41b8be81-8f89-5345-8fd8-e4453cda7272", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.934179Z", "modified": "2026-06-14T11:56:43.934179Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--d7fde37b-1aab-54d6-aed9-4770f5a26c16", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cd24aa6f-0991-5b0a-a789-82487df2e554", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.934303Z", "modified": "2026-06-14T11:56:43.934303Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--367ce114-62ae-527c-a4ee-f10c721cefa2", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a7706b79-30d3-52fd-928e-31ad0a0ee5f6", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.934476Z", "modified": "2026-06-14T11:56:43.934476Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--510b0d98-30ce-50e3-8d67-3a6ecfb6ed4e", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0341541a-6d28-52fa-af84-cc8509e906ef", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.934647Z", "modified": "2026-06-14T11:56:43.934647Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--cccab48c-53d4-58b0-b1fa-7ae3a2b523fb", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--af028bf4-6193-5039-a745-34c5afe04129", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.934812Z", "modified": "2026-06-14T11:56:43.934812Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--8882149f-6ae8-548f-a619-a94cb1c3e7fb", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6f161ce4-a56e-57d3-bd01-5e22df44fc56", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.93498Z", "modified": "2026-06-14T11:56:43.93498Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--37d03d03-65f6-5d20-b1a5-614768c8091a", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e466ad91-9daa-5395-9bcc-99182a21e660", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.935092Z", "modified": "2026-06-14T11:56:43.935092Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--aaff500d-d585-5e0a-bc20-f950da5a44f5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--017307a8-9222-516a-8192-54de48915d1b", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.935202Z", "modified": "2026-06-14T11:56:43.935202Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--5c7e9d82-837f-5eb2-acd0-164487006747", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09538bc0-5960-5bbc-9cd0-eac48448a13f", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.935329Z", "modified": "2026-06-14T11:56:43.935329Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--18c8b693-fc09-5a8b-9397-ead6aa667ad5", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e17f5296-58f3-5e30-9554-c6e48f000bce", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.935452Z", "modified": "2026-06-14T11:56:43.935452Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--68373f1e-ea28-5c4c-91a6-469f309a2351", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8266d615-07aa-5399-b4c9-a20a4e0c8656", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.935568Z", "modified": "2026-06-14T11:56:43.935568Z", "relationship_type": "related-to", "source_ref": "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "target_ref": "tool--335b85f7-ba9a-5315-a9df-3ee47a4647f6", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "report", "spec_version": "2.1", "id": "report--fc7cbb43-66c7-5373-b2ac-b5eb14fb24fd", "created_by_ref": "identity--8bc8284b-deb5-546c-a233-57ea34b2ea0d", "created": "2026-06-14T11:56:43.936133Z", "modified": "2026-06-14T11:56:43.936133Z", "name": "AdaptixC2 Open Directory Exposure \u2014 45.130.148.125 Operator Toolkit", "report_types": [ "threat-report" ], "published": "2026-04-30T00:00:00Z", "object_refs": [ "ipv4-addr--3257cf08-74ae-5e80-be92-c02eb35abbec", "indicator--b88583ed-5f96-51aa-a903-3c4cc6b4487e", "url--8c9f4d09-6837-5d6f-8e4d-7ea16ed529f9", "indicator--ab87d42d-b67d-5448-98d1-696dff808c69", "url--9d30fbfa-e5e1-5bf6-848c-a85922ae392a", "indicator--fa6a1922-fa93-5ba1-bd6a-5e0a917162dc", "url--fc9dab5a-35ff-5f85-b3be-14c632464a66", "indicator--33ca0dc9-26b9-5e29-99e9-f5e45f68de72", "url--178885d7-ee1f-5b06-81e3-bf7b5b36d226", "indicator--d5da48a8-19df-5f0c-8628-81de1cce9bff", "file--2a61bb1c-d9db-557e-97e6-630a7a4d6c48", "file--4ba3a103-b5a1-5a46-a234-0d0e206dc0c3", "file--3c8b98ce-d33a-5270-913e-b5f32c5a46cb", "file--3eb47714-c782-58d2-91e9-d8ccb4a764c7", "file--ce8281e7-76f2-52bf-95a1-2ec38136d049", "file--3d69d04b-4b83-57ae-9830-d6d7ca9968dd", "file--2d307603-73df-5a9b-a306-286a223b57b0", "file--ca7020be-42ef-52c3-803a-e9b7e5336a14", "file--0e31bbce-839a-503e-8e06-4110de5b66d9", "file--e4eb2c93-e994-572e-98cd-c1cc338462e7", "file--ff63f010-a21e-5c1b-bb6c-86fab109b94e", "file--3bda8c02-e4ec-58e7-a127-5027b82c1406", "file--f4d19c0c-b2f3-5b5a-ac10-d3e82b600f51", "file--bde49c0b-2f8e-536c-815f-95ccc1dffae9", "file--99f29585-fd5c-57ce-b967-0fbaf6538a88", "file--6af03918-6d4a-54dd-bca9-48ff42e23ea3", "file--aa9664ad-ca86-5345-9347-ade3caa95ddf", "file--48984a3b-50a3-5681-a9cf-07762526a141", "file--9ae06d3d-7924-5891-bbe3-d79c9b6e3ce8", "file--c823cb52-ddab-5978-a468-70e1b590a30e", "file--95516490-c20e-5add-8261-ccbd815d33bb", "file--cdc9df48-9494-5e3f-ad41-2c2eacea7713", "file--55291c84-d59f-5ec4-912c-a018a1b67422", "file--eb5185cc-08e5-5d63-81bb-eee507ef3e48", "file--398a2c22-ad32-58c4-acf0-57c98f1c3ad1", "file--a1fa9014-19a2-5ddb-ae4f-c59572741c16", "file--14ff958f-9651-5107-be45-e41dc6ac9471", "file--d221d8cb-e340-5709-ae0f-9d16337b3aea", "file--267b7d2b-acb4-5c15-a8b9-e3094f78f72a", "file--e035f280-a833-552e-8920-2ea49187bc9f", "file--f52bb763-d4dc-5590-9173-d25c83daecf3", "file--9e0284a9-7d94-5eb8-9228-cb965207bca5", "file--c6a5cee5-db07-55bd-b830-a7bd1240f7f5", "indicator--21b9ee10-0c0b-5c2f-8b47-d1229c5798d0", "indicator--094fbbc6-536d-50a0-8f71-461cd28ab1b2", "indicator--29ee4afb-5cba-509e-a459-07bbbffd3f0f", "indicator--fc496f6f-fe13-5ba1-ac33-ef3aef6ea4e8", "indicator--d76b55fc-949f-5b1c-862b-bb6a03cff661", "indicator--a5f38ce6-890d-51b2-8480-756827ab7a71", "indicator--8c8d3ca6-f2b5-5aa4-a8ec-7e4ac08edad4", "indicator--605f7e43-cbbb-5cb2-afb9-ff1cbd680d6c", "indicator--9ab437d5-7db8-5569-a739-2601dc627fff", "indicator--38508244-0ae6-5658-95a0-b72a67ff5fa6", "indicator--4181004e-43ab-5584-a5ba-64753f027be3", "indicator--d923252f-185f-51c7-b2e0-a0af3c424a89", "malware--1f4c7843-4581-5365-9f04-fa5a804bd2df", "malware--f8422077-3973-5026-80e8-7901120a07a4", "malware--730f0fa1-1ae1-52cd-828b-bc0d3a2ddb33", "malware--bb20abd3-8cc2-538b-a7d5-97020bd3ac17", "malware--9b520f11-d89f-5f05-a212-b2d85278bcac", "malware--9c8d92ed-e945-5148-8212-3a417aa4e8db", "tool--7a9a84a0-8108-5fb4-bbbe-f459b8fa9104", "tool--add3e1b8-9529-5d6a-8720-9e808ffccbf1", "tool--806a5614-3e4a-5f72-a615-d20117a6799a", "tool--87db9afe-d2c1-5bad-baf6-da5306378d99", "tool--0e9732c6-b4ee-57a3-9321-feb6be429f83", "tool--18d35a6c-cfe2-518f-b09f-dae32f89b16e", "tool--57326b47-1490-5933-9558-26d087f7f406", "tool--e6bed0fd-480d-5525-b819-95ce8cc76e60", "tool--b0e66980-03a7-5247-a1f9-a321396f58d3", "tool--8bc64dad-8c41-5dde-985e-1edc8662d9af", "tool--6ff5555a-2aad-5fda-8a8f-e43c09a742cf", "tool--59ed6ee2-fccc-5d50-8ae5-95374efd253e", "tool--a4e59458-e79e-506a-a2da-c3595d8c4e5b", "tool--14b58e6c-ad1b-500c-874a-23af4f198636", "tool--12d2d754-b3ea-5984-bc77-aacde638e054", "tool--4be062fe-6b91-5a77-bb56-db5584e2a233", "tool--d7fde37b-1aab-54d6-aed9-4770f5a26c16", "tool--367ce114-62ae-527c-a4ee-f10c721cefa2", "tool--510b0d98-30ce-50e3-8d67-3a6ecfb6ed4e", "tool--cccab48c-53d4-58b0-b1fa-7ae3a2b523fb", "tool--8882149f-6ae8-548f-a619-a94cb1c3e7fb", "tool--37d03d03-65f6-5d20-b1a5-614768c8091a", "tool--aaff500d-d585-5e0a-bc20-f950da5a44f5", "tool--5c7e9d82-837f-5eb2-acd0-164487006747", "tool--18c8b693-fc09-5a8b-9397-ead6aa667ad5", "tool--68373f1e-ea28-5c4c-91a6-469f309a2351", "tool--335b85f7-ba9a-5315-a9df-3ee47a4647f6", "attack-pattern--5b7a06ed-32c6-5260-95a8-8e82d3f41f1f", "attack-pattern--852a0723-27b9-50f5-a408-61944e14a1bc", "attack-pattern--86d4700a-0ebb-52fb-9fdf-88224c58f7b6", "attack-pattern--f2547d19-a04e-5945-ba6a-c96c6f509e67", "attack-pattern--8e7236ae-f640-50d6-b963-93fae62071c7", "attack-pattern--0e5a3749-a144-57b8-a774-20335f3f0941", "attack-pattern--ba61986c-2ad8-5246-8fad-deba7ea471bd", "attack-pattern--ab386774-9556-5bc2-8927-6d98193000ec", "attack-pattern--f49f7ccf-9e42-5d58-aaa7-c46f34716f27", "attack-pattern--d00141fc-37fa-5b54-9d20-a7bd180eeb75", "attack-pattern--35c31841-4eeb-5335-8d8f-dc05e292fdfc", "attack-pattern--cd2b8020-f743-5a86-89bd-242def0e953b", "attack-pattern--f023ef3b-b061-56b8-8d67-d5b66fa6c613", "attack-pattern--12acaf8f-029b-5f5b-8f13-47263822835a", "attack-pattern--ba6b8d93-c1b1-5bd3-9ebe-465b4d49164e", "attack-pattern--b4868fee-9a5d-56fc-a87b-bad2d374fea5", "attack-pattern--b41e6891-97a9-552c-8eb3-afaa1f79e9d4", "attack-pattern--b5995633-347d-5213-a283-22c6abbb031e", "attack-pattern--ab051490-2415-5435-8760-f0735c0314bc", "attack-pattern--2b613316-6a4f-5cbd-ad25-9e251342eb43", "attack-pattern--c042587b-4ea4-50cf-9f38-f81673df9459", "attack-pattern--80b14c50-a83e-5710-bab3-dcfeb4e392e8", "attack-pattern--b12dc527-38bd-5e3a-a077-afa4290df40b", "attack-pattern--a0baf777-47e7-57bb-a5f8-ffa4f9a1dbe8", "attack-pattern--7aaed457-e65a-5fce-9e83-3b3f1fcd78ce", "attack-pattern--8ed1ed7b-e352-5aff-aed4-519d09134d5c", "attack-pattern--bd2de1a2-5405-5f08-b368-3ed9ffad029c", "attack-pattern--04bafd5a-d434-536d-9436-911602d63532", "attack-pattern--cd520a82-b681-55f1-b85d-7a920916f8df", "attack-pattern--f7bc8c65-9e24-58d7-abaf-3246b84afff4", "attack-pattern--28091db6-87a8-5b9f-8e80-605a0bf6ca6a", "attack-pattern--2ef7fb3b-6ed3-5341-bc14-40bb267c441f", "attack-pattern--2c8a99e6-e85d-5633-9fc5-48020c0aafce", "attack-pattern--e037d666-9601-5f6d-a51c-eaf2cbc01725", "attack-pattern--8bd25a7b-1b65-5b61-9080-4b05d2ce7541", "attack-pattern--81ac1dd0-a8ac-50ba-bd1a-cec2886340d5", "attack-pattern--b1f2e4be-8bd7-50f4-9b12-8ff5a814d239", "attack-pattern--88e2313f-cf2a-59dc-8124-88e46e53b1c4", "attack-pattern--44bf0bb6-4445-5791-9daa-2c0a12978bf7", "infrastructure--65f435f6-a66f-56b2-b226-340edba569de", "relationship--5d13ef7b-c9e4-539c-9247-0469299d6583", "relationship--48b04c85-7b88-5d20-84b9-ffe8e1e694a8", "relationship--83972023-7aa0-58fb-a9cb-4a92e6a3bae9", "relationship--c2a2a419-a872-59e5-9afc-8bc77d879a29", "relationship--612c04b7-58a9-5931-bb6c-424c1ac1b18d", "relationship--45f5c90f-ad0b-5321-a675-3134f1d4a01d", "relationship--8514d5f0-1e3a-548b-9b71-5a7060609a22", "relationship--9d647745-35ec-5d43-ae11-2da38c1a4f5f", "relationship--c194e43a-ff42-5d41-84b5-bc16b4d1e2ea", "relationship--08852c32-cd0d-5d32-8b07-72ad6c9a44c7", "relationship--1986c996-dcd5-57c1-b4a2-48b91418f61d", "relationship--adcf90d7-273e-5bca-b64b-e9155504c1b7", "relationship--e8b1e2e9-217b-570c-a378-85856e2f93bb", "relationship--222d51b3-ef81-58eb-bc65-847d6b4698b9", "relationship--a817a5cd-bd22-57dc-8653-56b997e25514", "relationship--32e53a79-6093-5f30-846f-052c4e0f37e3", "relationship--9505c903-781b-5184-9080-a2647cfa9334", "relationship--f67ede06-107f-57ef-a023-026ba7f827a5", "relationship--5446c7ff-7ddf-576d-86a6-1bba667c81d6", "relationship--02618774-db21-5124-b02a-4cf9d03dba42", "relationship--68e68194-bbec-565f-a526-e061219d266c", "relationship--d7e2be6e-1baf-585e-a542-b797d687b377", "relationship--6d67e98f-850d-5293-acb4-ce7f5fb97323", "relationship--6fdb71a0-b6eb-5f13-a2ae-6ba8008c57ce", "relationship--e699d200-2324-5018-a245-fb536bb244be", "relationship--99ec7dc8-e6db-5970-ac3a-b3423f721ac1", "relationship--48c1ab6f-8398-520c-b6d1-9d026ebba00c", "relationship--64b3fd2b-8269-568a-958f-a2ac5c33d4c4", "relationship--6249414e-3039-5592-80fe-e24e620288d5", "relationship--57c31a6c-de98-588a-b2e5-e819f71ffbf5", "relationship--22fc8e74-2e0a-5368-958e-44be349b7ec1", "relationship--3b4eab93-1bbf-52c9-82fa-d19f7efbba10", "relationship--40a99d02-115b-5532-96e3-bb85081d0094", "relationship--2ce87ecc-c8e9-54f8-93bf-2757f35b06d0", "relationship--f80f7aa1-2cd5-584f-bd07-b1e59d574b4b", "relationship--167fadf1-23ff-56b4-8a53-d3a26fff04e1", "relationship--802d67fb-d980-5e1c-b93c-484e9ad38d10", "relationship--18e95ac7-063f-544f-bcfa-cb92ecc5e093", "relationship--747a35a4-2e10-5cfa-8ce0-3030d7d26f79", "relationship--80a04a9a-bbba-5ee9-a6e6-0f716517743c", "relationship--fb9f0a31-3c45-56a9-ad95-a1e7003e91e4", "relationship--651a17fa-733e-5f06-8be3-34f7a5144e4d", "relationship--e1768f1b-ad0c-5b73-a04f-a558925915d9", "relationship--d7a86987-1be1-5882-84a8-266b57d11acb", "relationship--20505b99-010c-5d57-b09b-109e2c7f0716", "relationship--7f9e671f-29c8-533a-8894-bec17a4b8157", "relationship--6c65746b-9a92-5296-852f-8a68f489cb45", "relationship--32b2ec06-bb8e-5aa1-b34b-55332d2cd04f", "relationship--309ba977-f3b5-549f-80e2-4e86cda83f7b", "relationship--c1f54375-7e4e-5a60-bbb4-a4edae427ee1", "relationship--f064e1a8-7a24-5965-96fe-4bad59205002", "relationship--077c49a5-f1bd-5896-a637-b121d0d42229", "relationship--d339eb02-4dd8-5e6a-9652-1980c6d55c9e", "relationship--bdd14cff-582d-5917-8d1a-8ad74923756e", "relationship--c802d9cf-1779-54b4-a015-987b93c175d9", "relationship--ce42ad90-9dc9-521c-b51d-d244376e889c", "relationship--8d7e611c-896e-5924-8a36-cebfb5f04c06", "relationship--f6f3bf3f-aaf6-568f-9a6c-bc7e5de9ecbf", "relationship--ae05f32b-fa2a-5900-b85e-0a0e378dc9f1", "relationship--defffc99-036a-5f99-9217-9105448949ee", "relationship--5d52bb21-4110-5922-a7c0-3bac9f30ad78", "relationship--c07df3c6-2180-551c-8c32-a0c318d5329b", "relationship--ac577c5f-367a-59a5-9a28-b6a82d193aab", "relationship--aacd0f2d-35f1-5dc5-817a-bcbaf15902dc", "relationship--92ccde56-bb53-5055-b0df-acf20342e7f1", "relationship--0c9876b6-4338-531d-b931-a31af02fc796", "relationship--f8c8ea81-8327-5169-8916-f5899b9a3108", "relationship--7fc67724-c77f-5cac-87b5-548d27ff94bb", "relationship--0f930af6-7def-5d40-b60a-373c9f93e955", "relationship--b8459a07-2df0-57d2-9019-25a75ead5599", "relationship--02990d5c-206d-52ce-a44c-46c69c034179", "relationship--e59078d4-c289-5fb8-84c3-243accfe1fdd", "relationship--b8306c05-5d37-5e19-a18f-e699cfcd6010", "relationship--40f0cac4-74cf-5d35-952f-17ef4ca7bfbd", "relationship--d8dc1d5c-0e09-50e6-a9fa-01f64b6c75fa", "relationship--bb99c784-9e0d-51da-a7fc-4d446cb4e1d5", "relationship--dfdba767-be43-55e8-8a6f-f5b7eb4c2f46", "relationship--1b6eb6c5-0963-5bd2-856c-6f4f29639156", "relationship--0f8219ac-3998-53df-a526-908880c6f4ec", "relationship--0846380a-308b-5939-b433-c4452e9752a9", "relationship--7fe1f8d5-669d-53bc-844b-aa231f3f1979", "relationship--78259e36-2e48-5e50-839e-b92d507b00b8", "relationship--049b2c91-a6df-5dab-b83b-a5bae9f40031", "relationship--c702900b-68d0-5048-a4d4-9825d93e6083", "relationship--c2953cb6-b420-5f73-afea-605aa851e28d", "relationship--c8f48deb-60f0-535f-af1d-55a002a5d560", "relationship--a941f838-17fb-5441-b866-28e77c9fb474", "relationship--25c1e2f4-53ca-50a2-9023-baf91c69f49f", "relationship--2b906f5e-3505-5633-a653-8df6494c4786", "relationship--6df16147-0894-54d8-8b26-b856a8af0284", "relationship--f75672ff-95bf-5c74-af37-5a33397f674e", "relationship--bb0f8588-7b71-5710-816a-a9d4f1be0dbc", "relationship--4a4fbd31-3e68-54d8-87cb-c573f89498f3", "relationship--46414701-8932-53cd-9ede-a22f630671e8", "relationship--a1029cc3-99dd-5a39-9a24-43d53ddacfac", "relationship--74e49430-5498-57f8-90f6-860b20cd7f37", "relationship--c991679a-54cb-5beb-978c-e3cfdfe10a7e", "relationship--ca80cc30-d3a0-57ee-a31d-02d46f272250", "relationship--3ae8fdce-d5f5-5757-af62-9940652aaa05", "relationship--492542fb-c061-55f1-b21f-7cd41e5b4d40", "relationship--71c0cfc4-babc-53ae-899c-dc955328de6a", "relationship--cfb2eb92-906b-5331-aa2f-417c6b9a9f86", "relationship--ccfc3084-a5ab-5120-8733-e64f94707b05", "relationship--76c04675-ab21-5064-a9ea-30c7b19e6ce3", "relationship--30890469-c5f9-5541-8e11-4e44b060dc17", "relationship--42c09aac-6f83-5aa2-a48d-a44d1f5ac917", "relationship--a0ed56f7-65eb-5db9-b8a6-4556e9569f67", "relationship--bb5554c4-c655-5fb8-8135-6354afddf6df", "relationship--febcbdce-b112-5961-91dc-48e76a355787", "relationship--621963f3-ad69-5ac2-8095-74e9c790ab2f", "relationship--d6fa7bd4-6883-5432-8591-65f928a89ee2", "relationship--940495e8-0a3e-5ee4-9247-117364541de3", "relationship--d6519e2c-a67d-5bf3-ae10-5a0f88771a34", "relationship--16d58d6f-66c4-5212-85a8-16ec056ac276", "relationship--94295ebf-376f-5fc7-ae85-806ee5f2bf89", "relationship--a1ad5134-13e7-55eb-ac8f-307edf2977c0", "relationship--b072625e-2b9d-5fc7-9308-6a2fc08a2afc", "relationship--286bdb83-2803-5209-9bd9-82abf1e01216", "relationship--f9e3b521-66fe-58fa-9bcc-3fae35a89f33", "relationship--051be214-f537-5bc2-9c97-2c5267d8a408", "relationship--272017f9-052e-517a-95a8-155c27d522aa", "relationship--7c1ad432-67f9-5730-bbe6-6b174eb5a5a8", "relationship--0d6a0b56-7d86-5877-8d38-6e958782a1f8", "relationship--c9c70644-c69a-5db7-aa24-1eb9d893bb8d", "relationship--14085932-6db7-5998-a5cd-0dc4f6a163ff", "relationship--994597d8-32fb-5b45-8829-51d57e60863f", "relationship--8b2a4c41-8003-5001-a4dd-85f622f15c1e", "relationship--121b01cf-8f8c-58d4-bff5-850cabfedac1", "relationship--dad7d7dd-8b89-5d66-8f71-698cef55298b", "relationship--7ae59b73-cb99-5641-8bc7-1c2d1b732c9b", "relationship--4d1200ee-07ae-59b1-8100-8704b36f923a", "relationship--82a1ad99-9f54-51b4-93bc-e0c0fc714484", "relationship--a5c2b81a-5cb3-5b7a-a6da-6781fee3708a", "relationship--4d664a89-88e4-5fb2-ad67-2804a8bd8e51", "relationship--acbe8ef0-5781-5c23-898a-365e9d55f3cc", "relationship--5d3dab23-9a23-59ac-bf81-9a16fa48c92f", "relationship--7d55b042-e61d-56ce-9e7f-5ed7b64aff2c", "relationship--5b1e2ed1-146b-50c7-9950-0a1df48d090f", "relationship--7c039f68-0b78-500e-aea5-878f32fdaead", "relationship--c502d626-e084-5ec3-8bf1-b577ecb9b1d5", "relationship--afade7e3-7d7c-5a6a-b1e1-9e5a5cec8b38", "relationship--ca6db606-a6cd-5a88-a60f-8c5354146201", "relationship--1ef22504-5b7b-5439-bc1e-ede5f05c629e", "relationship--f59136bc-331a-5abe-b932-727e490119d7", "relationship--d7cfdccb-b828-5a55-943f-50b695d52663", "relationship--7c40a949-feb0-5537-8970-ceb93f4be787", "relationship--6c360369-6c9c-578d-932f-c651edba247e", "relationship--21853f40-357b-5ebc-a7a2-b149c61d6c22", "relationship--aae90974-1a5d-5aa8-8072-06e4efbe591a", "relationship--43f93bc0-0d89-5a84-91bc-c248299c2f70", "relationship--61dbc6ec-a90c-5b2b-9bbb-548475757cf2", "relationship--bbe0afff-468e-5dac-9de4-4b5ed0a4d838", "relationship--23a9a58e-137f-50ab-8a2e-6df807f287ec", "relationship--dd6b54c4-7409-5f37-a036-bce921203c14", "relationship--7b224111-ec98-505c-a750-b23139fab269", "relationship--09d7b376-255f-5adb-8311-df67b896a13f", "relationship--7a32f5b8-8081-50f1-b4bb-dab5276ce6cb", "relationship--e092edc9-ba4d-5c11-82d3-7c6cdfd399f7", "relationship--a5ccc35f-c8f7-5550-9d71-7ac1b3a609f5", "relationship--4a638a53-e8ee-5da8-8b34-d467cd0496ad", "relationship--3b94a6fc-9241-5a7a-9c4f-36f9d1ca3e6a", "relationship--f127ad88-db03-5a92-9c6e-955869842a94", "relationship--046ee21c-00e4-5323-b21c-4e4e2952984f", "relationship--52ffb640-e142-50d9-a545-f60c899e0f5c", "relationship--c2f911c8-358e-5ece-ad90-1434fb0ac181", "relationship--a4459efa-42a0-5dd9-bb7b-a76683e9ffbf", "relationship--8bb16739-0b09-5e25-8960-97bc12b96774", "relationship--d4bd92b7-89d7-5247-bad1-e972a544a99e", "relationship--48572d41-103e-5f3a-8198-1ea326a92d04", "relationship--71391274-d611-521e-bc77-f686d902c453", "relationship--9f94e9ad-457c-511f-aecd-051a4656f065", "relationship--bbf5f06c-95fc-5aea-bc0a-41ef8b24c280", "relationship--78c42c72-56c9-5e4e-b0c3-79d128e8a958", "relationship--f8eb1b1b-6fb3-5097-9eec-3e668ae9a26d", "relationship--a8fbc96e-85b2-5ea8-8447-5b5ea21afb95", "relationship--0c4fd289-1094-5225-87d4-a77177ae4072", "relationship--4c028cbe-61a8-5baa-82c1-8f7ef0ecb171", "relationship--e41becfd-da7d-5e1f-a5e8-102fad8c2c79", "relationship--e321811f-eb23-5a9a-90f5-f7de970209fe", "relationship--88b89574-1639-552a-859b-c9256ee749d5", "relationship--5db2dc78-27cd-5dbd-8889-d78d7b035755", "relationship--f5f0e899-af28-5115-97e7-e018c25ace8a", "relationship--93e16a21-5841-5765-9bcc-1d11b9031db5", "relationship--af1aa11a-d460-5df5-ba01-e46a4ee5b870", "relationship--391f5ef2-c0dd-54c5-b3e1-25a9f569fba6", "relationship--ee526cad-25ac-578d-8307-36b058190769", "relationship--a46b7861-24dc-5930-a784-a9142ae4f0b0", "relationship--fbc6223f-8d5e-5906-b91a-f790c313fed0", "relationship--3707a2ff-df96-5312-9d90-0d28c9316b9f", "relationship--f558a751-e45a-5c65-be7e-80cbd38d5314", "relationship--abedaa66-5592-55cf-9e78-8cb5306571e5", "relationship--7e7cd7a5-0bf6-5da4-b38b-eedf1253365e", "relationship--e5234c2e-2a89-5bb6-9954-b55f92c3fb81", "relationship--7985fffd-84a7-5a17-855f-680ee275b1b8", "relationship--97eeb244-c055-50e2-a9c7-93ea74c98bd8", "relationship--e4f83744-67b1-5c84-93e0-57fabd585a26", "relationship--4f8be8ae-6bd4-5a93-946b-316ba2b7808e", "relationship--56add661-b5a7-5ea6-9b3a-56430486f94b", "relationship--17a86235-c383-53b9-b127-7100245340d2", "relationship--30595e62-4a4b-5d78-b341-d4636c103d3a", "relationship--5e6edf3f-0b9c-521c-b636-2ea4fdbb30da", "relationship--43326e3b-9988-5ddc-9dde-08a6432e17ba", "relationship--8044c435-1dd4-5e4d-9005-08f95fa39902", "relationship--8bbf3afa-a480-5925-89ba-680cd9233652", "relationship--39bad9cf-3eec-523c-8fee-a61d29cd36bd", "relationship--554b84c7-6260-584c-ae96-edee08b75adb", "relationship--ba1f3137-c7ab-57ad-8fda-e1262f5c1e64", "relationship--3b9674c9-2e03-5b14-ba99-41e75c600557", "relationship--7c322237-ffc5-5bdf-bd37-4ff9094ee89c", "relationship--9b481c55-5fea-51c7-9899-d020f3947fc8", "relationship--dc567fd3-2de1-546d-8700-61c60e6e693b", "relationship--fb55c1af-a833-5fb6-99ca-cc086b933b40", "relationship--b870c85f-3a1b-5ec1-98d1-9c05dc8ebbfe", "relationship--5b06536e-4096-5cba-abc3-e40247fb3511", "relationship--98d7dd69-4e08-5944-82ce-427cabd1fd61", "relationship--0728790e-3730-55b3-bf14-e72a5e9eb388", "relationship--24213b6a-5e80-59b9-a39d-867caedb2673", "relationship--2021b380-2bba-55a1-a846-66cf98f3c7ba", "relationship--a506bc11-35f9-55f7-a93c-1df21940fdd7", "relationship--e9b870be-c095-52d3-83e0-56a74c128e57", "relationship--5b17e05f-251f-5aae-b243-850240607f72", "relationship--2e622a31-7be4-55f8-a843-f779f13ddf6e", "relationship--904145d2-ccd2-59bc-9ce1-8f6ec77a17ec", "relationship--74797931-57dd-54c1-ac31-d60b8103e59e", "relationship--a8b952d5-83b1-5929-a055-d9d22c758c75", "relationship--32449b5c-919a-57ec-913c-cf5f43678f26", "relationship--6ca25c89-7273-5f73-a8ad-2cadbaf0acbc", "relationship--7fb00654-078f-52ff-8a4b-159ed7a85924", "relationship--13a42f24-9a12-5ee6-b807-f6f452925555", "relationship--b5b80f4e-04a4-59f7-8c5f-310d8402cd6a", "relationship--d9148fb8-81b3-5132-8e11-f9c0f07234be", "relationship--fe0284bb-0a57-5545-8e35-23645d82b878", "relationship--47d9ca7f-a7a0-5948-b736-ccfc1e9163fc", "relationship--37466d64-24a4-5f7d-b14d-7ee30e3b025f", "relationship--68f920e3-2f32-5e73-9ae9-4f786b5f6e49", "relationship--cead1860-0e30-5462-9e35-3245c2e0aeba", "relationship--fc890a33-dc13-58f4-a820-a7ed5e34f555", "relationship--d3ba2e1c-60d1-5286-b75e-918177b005e4", "relationship--f60ba3ba-5012-5aa1-b8a8-5e750f09b281", "relationship--86ed7d93-ca2b-5308-bb87-51fce3fda728", "relationship--81a78c3b-05cb-5833-93c6-6a8ece257770", "relationship--4e56cdcd-b363-5ce9-b690-c78549305eac", "relationship--073830d1-47c5-579d-b5d6-e8df66472099", "relationship--7da81b1c-d785-5071-a4c1-5fc5aaedf2e0", "relationship--2862ff17-09ea-5397-bc1f-4f74127a0e3a", "relationship--867f7526-4d03-534d-96c0-7828d68feae5", "relationship--a145830e-528b-5d52-8cc3-fb9591959bf3", "relationship--0cec4c76-0b45-57d3-b0a2-b1d1ecbce087", "relationship--bb983d3c-c90d-5b6d-9127-3214643eb0f2", "relationship--410c3d39-500e-52a4-b8e8-e59eace1342c", "relationship--df6d72f1-23ba-5834-90a0-e854e449d9ed", "relationship--0b71cdc3-23f0-5dff-b387-2e208ef6b181", "relationship--638f59c6-ebb0-5284-baf1-2655cc8c36dc", "relationship--308cee0d-5e29-55b9-b489-06f6be050b6b", "relationship--96a2102f-e3c6-5c50-bfc4-941ac2e11900", "relationship--81beea90-002e-5ad7-8285-cb40b05667a3", "relationship--7e8c09d7-d30c-5175-b413-f66302d0f007", "relationship--05a29a13-3ba2-5f20-81c3-be6016c7bcd8", "relationship--1ea5455c-adcd-53a3-8c5b-c7161012a325", "relationship--901c3628-b3e2-537f-aaf2-1ad1d32d01c8", "relationship--a5698400-267f-5fbc-b45d-18aaa72a7f51", "relationship--309267af-63df-58f3-bc92-4c177d398e87", "relationship--cfb72aba-c972-53c5-9b0d-bf1378683229", "relationship--1a675b33-85bf-5908-8c7b-f38efeb7da4a", "relationship--8e58a952-51c0-5ffa-8443-7e1de79d5513", "relationship--82cc2f23-ce80-50ed-a88b-c3bada24a7b2", "relationship--6d6f2887-b565-53bd-9495-b4bfbbc103c3", "relationship--5a9572d8-c6df-5743-b459-ca6e30bc1035", "relationship--1f5551af-e121-5e7c-b1e8-3ce0002cff42", "relationship--cd277526-e110-5a40-9c36-16a53b001ef3", "relationship--8e00e6a0-0953-536d-ad3b-11f40d2c45e0", "relationship--296e08a0-8800-52a8-ae31-ba70756c6ee6", "relationship--b7bf7b92-41a4-5015-af8c-8bf6d64c9b5f", "relationship--41b8be81-8f89-5345-8fd8-e4453cda7272", "relationship--cd24aa6f-0991-5b0a-a789-82487df2e554", "relationship--a7706b79-30d3-52fd-928e-31ad0a0ee5f6", "relationship--0341541a-6d28-52fa-af84-cc8509e906ef", "relationship--af028bf4-6193-5039-a745-34c5afe04129", "relationship--6f161ce4-a56e-57d3-bd01-5e22df44fc56", "relationship--e466ad91-9daa-5395-9bcc-99182a21e660", "relationship--017307a8-9222-516a-8192-54de48915d1b", "relationship--09538bc0-5960-5bbc-9cd0-eac48448a13f", "relationship--e17f5296-58f3-5e30-9554-c6e48f000bce", "relationship--8266d615-07aa-5399-b4c9-a20a4e0c8656" ], "labels": [ "C2", "Toolkit", "Open Dir", "Multi-Family" ], "external_references": [ { "source_name": "The Hunters Ledger", "url": "https://the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/" } ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] } ] }