{"type":"bundle","id":"bundle--ab65071b-ddf2-55ed-ac6b-a5f0772ae435","objects":[{"type":"intrusion-set","id":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"APT12","aliases":["IXESHE","DNSCalc","Calc Team","DynCalc","NUMBERED PANDA","G0005"],"first_seen":"2009-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/apt12"},{"source_name":"mitre-attack","external_id":"G0005","url":"https://attack.mitre.org/groups/G0005/"}],"labels":["nation-state","esp"]},{"type":"attack-pattern","id":"attack-pattern--54df49f1-527d-56ab-b837-e35ba7de521b","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"Bidirectional Communication","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1102.002","url":"https://attack.mitre.org/techniques/T1102/002"}]},{"type":"relationship","id":"relationship--59e42c1e-01ac-59a2-b419-310ab25f8b44","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"uses","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"attack-pattern--54df49f1-527d-56ab-b837-e35ba7de521b"},{"type":"attack-pattern","id":"attack-pattern--5bf681f3-d3ec-5c7e-9627-e4241d9c8ae9","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"Exploitation for Client Execution","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1203","url":"https://attack.mitre.org/techniques/T1203"}]},{"type":"relationship","id":"relationship--70b4566c-941f-5c90-8724-47a544e8992c","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"uses","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"attack-pattern--5bf681f3-d3ec-5c7e-9627-e4241d9c8ae9"},{"type":"attack-pattern","id":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"Spearphishing Attachment","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.001","url":"https://attack.mitre.org/techniques/T1566/001"}]},{"type":"relationship","id":"relationship--111847b3-cdb7-562f-8a0f-8fa7e9d2aed9","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"uses","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed"},{"type":"attack-pattern","id":"attack-pattern--78709153-d7c2-5e1b-be56-9ed894881792","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"DNS Calculation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1568.003","url":"https://attack.mitre.org/techniques/T1568/003"}]},{"type":"relationship","id":"relationship--bf9e29ef-a576-5e4e-8414-9b4418701859","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"uses","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"attack-pattern--78709153-d7c2-5e1b-be56-9ed894881792"},{"type":"location","id":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"Australia","country":"AU","region":"oceania"},{"type":"relationship","id":"relationship--fc40461f-b570-5a57-a820-520032a70db0","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"targets","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a"},{"type":"location","id":"location--fe5915e8-c6cf-5230-9d81-da8132a006fa","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"Egypt","country":"EG","region":"africa"},{"type":"relationship","id":"relationship--fcc45f8e-36d0-5995-aeda-be0afae83ea2","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"targets","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"location--fe5915e8-c6cf-5230-9d81-da8132a006fa"},{"type":"location","id":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"United Kingdom","country":"GB","region":"europe"},{"type":"relationship","id":"relationship--f65dd0c1-6e7d-58aa-8987-5f6049de7529","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"targets","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6"},{"type":"location","id":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"India","country":"IN","region":"asia"},{"type":"relationship","id":"relationship--76873b95-d28e-5b1c-af1d-84924940079f","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"targets","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82"},{"type":"location","id":"location--168ae1d8-d8eb-5440-9d21-d02292700adf","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"Japan","country":"JP","region":"asia"},{"type":"relationship","id":"relationship--305a6798-141d-5b31-b964-90f864fabdbb","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"targets","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"location--168ae1d8-d8eb-5440-9d21-d02292700adf"},{"type":"location","id":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"South Korea","country":"KR","region":"asia"},{"type":"relationship","id":"relationship--25d968d4-6e33-5758-a6e9-f2324b8dc6ae","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"targets","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451"},{"type":"location","id":"location--688e8d70-71a7-5dbf-9456-491580df260f","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"Netherlands","country":"NL","region":"europe"},{"type":"relationship","id":"relationship--8805a674-82bb-5dc1-ae19-476cb95e2f1b","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"targets","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"location--688e8d70-71a7-5dbf-9456-491580df260f"},{"type":"location","id":"location--9f915047-365b-5d02-ac33-38528c38eb92","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"Singapore","country":"SG","region":"asia"},{"type":"relationship","id":"relationship--7392965d-6f54-55d4-988c-add11cf6a7af","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"targets","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"location--9f915047-365b-5d02-ac33-38528c38eb92"},{"type":"location","id":"location--8ed8256a-aa56-5d8e-987a-d6411af504b8","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"Tunisia","country":"TN","region":"africa"},{"type":"relationship","id":"relationship--c991be4a-9ce4-5a28-84de-6951a6e770c6","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"targets","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"location--8ed8256a-aa56-5d8e-987a-d6411af504b8"},{"type":"location","id":"location--b6441ffb-0865-5bb9-9d5f-f800436cb4f1","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"Taiwan","country":"TW","region":"asia"},{"type":"relationship","id":"relationship--23b2a574-b771-5d44-a676-dbc18ce0dd6b","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"targets","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"location--b6441ffb-0865-5bb9-9d5f-f800436cb4f1"},{"type":"location","id":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","name":"United States","country":"US","region":"americas"},{"type":"relationship","id":"relationship--e698b148-2a7c-5307-84b2-d6bc95e1b65a","spec_version":"2.1","created":"2026-05-20T09:50:10.477404+00:00","modified":"2026-07-28T19:36:24.239+00:00","relationship_type":"targets","source_ref":"intrusion-set--050b9e1e-3286-5de9-93ba-f04c3f987d3f","target_ref":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505"}]}