{"type":"bundle","id":"bundle--4705649f-6ff9-5181-9d83-d382ca2e83cf","objects":[{"type":"intrusion-set","id":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"APT19","aliases":["Codoso","Sunshop Group","C0d0so","DEEP PANDA","G0073","IRON LYRIC"],"first_seen":"2013-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/apt19"},{"source_name":"mitre-attack","external_id":"G0073","url":"https://attack.mitre.org/groups/G0073/"}],"labels":["nation-state","esp"]},{"type":"attack-pattern","id":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"System Network Configuration Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1016","url":"https://attack.mitre.org/techniques/T1016"}]},{"type":"relationship","id":"relationship--66457c1b-9836-5d6f-ad76-dad15713f3a4","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c"},{"type":"attack-pattern","id":"attack-pattern--3808bff0-0f79-5ea2-998d-aa039ff41486","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Command Obfuscation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027.010","url":"https://attack.mitre.org/techniques/T1027/010"}]},{"type":"relationship","id":"relationship--cfb724fa-2008-594b-98f6-59a98f353d34","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--3808bff0-0f79-5ea2-998d-aa039ff41486"},{"type":"attack-pattern","id":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"System Owner/User Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1033","url":"https://attack.mitre.org/techniques/T1033"}]},{"type":"relationship","id":"relationship--6dadfda8-d81e-5171-8641-0f327ced9638","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae"},{"type":"attack-pattern","id":"attack-pattern--298551ee-22ca-5cf7-af46-41d8035efbcf","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Command and Scripting Interpreter","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059","url":"https://attack.mitre.org/techniques/T1059"}]},{"type":"relationship","id":"relationship--a1e2829a-aa09-5f11-b13e-3778c98b9247","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--298551ee-22ca-5cf7-af46-41d8035efbcf"},{"type":"attack-pattern","id":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"PowerShell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.001","url":"https://attack.mitre.org/techniques/T1059/001"}]},{"type":"relationship","id":"relationship--da266210-3a3e-5ed3-b1ce-59eb4d6d2d03","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d"},{"type":"attack-pattern","id":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Web Protocols","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1071.001","url":"https://attack.mitre.org/techniques/T1071/001"}]},{"type":"relationship","id":"relationship--2e19e1de-c411-57d8-8963-e8259aeeea8c","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9"},{"type":"attack-pattern","id":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Modify Registry","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1112","url":"https://attack.mitre.org/techniques/T1112"}]},{"type":"relationship","id":"relationship--75ed975c-9bb3-54aa-8ca0-041c131ec767","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51"},{"type":"attack-pattern","id":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Deobfuscate/Decode Files or Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1140","url":"https://attack.mitre.org/techniques/T1140"}]},{"type":"relationship","id":"relationship--223c1c1a-78e7-5121-b217-906ef3cd51de","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5"},{"type":"attack-pattern","id":"attack-pattern--512d8208-66a2-5f60-8683-ce6555aa98fd","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Drive-by Compromise","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1189","url":"https://attack.mitre.org/techniques/T1189"}]},{"type":"relationship","id":"relationship--45d09259-e751-58fe-a1ba-d3a7ce17cc88","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--512d8208-66a2-5f60-8683-ce6555aa98fd"},{"type":"attack-pattern","id":"attack-pattern--651509f5-52f0-5c8e-af73-dea9c8dd5f85","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Regsvr32","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1218.010","url":"https://attack.mitre.org/techniques/T1218/010"}]},{"type":"relationship","id":"relationship--0d2f8938-0359-567b-b271-5e50244aaad9","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--651509f5-52f0-5c8e-af73-dea9c8dd5f85"},{"type":"attack-pattern","id":"attack-pattern--ad5c8bbd-7aa6-54eb-a215-813f0e62fe44","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Rundll32","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1218.011","url":"https://attack.mitre.org/techniques/T1218/011"}]},{"type":"relationship","id":"relationship--070f6d58-414a-5b7a-a58f-8afd44ec8cac","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--ad5c8bbd-7aa6-54eb-a215-813f0e62fe44"},{"type":"attack-pattern","id":"attack-pattern--96d5f4f4-cc05-5750-bc7b-cbed22084b9d","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Windows Service","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1543.003","url":"https://attack.mitre.org/techniques/T1543/003"}]},{"type":"relationship","id":"relationship--deed0696-10f5-547f-b199-3546aed0e798","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--96d5f4f4-cc05-5750-bc7b-cbed22084b9d"},{"type":"attack-pattern","id":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Registry Run Keys / Startup Folder","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1547.001","url":"https://attack.mitre.org/techniques/T1547/001"}]},{"type":"relationship","id":"relationship--f50d66a3-9864-54c7-b1e6-2e263f6423f0","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4"},{"type":"attack-pattern","id":"attack-pattern--5dddb85a-c488-5311-9b00-314f07a79721","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Hidden Window","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1564.003","url":"https://attack.mitre.org/techniques/T1564/003"}]},{"type":"relationship","id":"relationship--57f80534-cf12-5bc0-bda9-c98d8e365876","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--5dddb85a-c488-5311-9b00-314f07a79721"},{"type":"attack-pattern","id":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Spearphishing Attachment","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.001","url":"https://attack.mitre.org/techniques/T1566/001"}]},{"type":"relationship","id":"relationship--4cf1d2e3-322c-59a5-ae7d-8e1d33eaf429","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"uses","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed"},{"type":"location","id":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Australia","country":"AU","region":"oceania"},{"type":"relationship","id":"relationship--0405af26-b701-58a7-b68e-731de0325a91","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a"},{"type":"location","id":"location--0b52720f-a42f-5bec-bac1-5784de12282c","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Brazil","country":"BR","region":"americas"},{"type":"relationship","id":"relationship--eafd9a1a-12af-5e5e-a58c-2b90468cad85","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--0b52720f-a42f-5bec-bac1-5784de12282c"},{"type":"location","id":"location--df32d83f-5f4c-5118-a126-3f5c603db260","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Canada","country":"CA","region":"americas"},{"type":"relationship","id":"relationship--197f6831-8655-5be8-8b1a-329490a4be88","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--df32d83f-5f4c-5118-a126-3f5c603db260"},{"type":"location","id":"location--6cf74cdb-05d3-5c2b-87c0-28df42a33e96","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"China","country":"CN","region":"asia"},{"type":"relationship","id":"relationship--05b1a596-8c44-5262-ac51-ccfea8f11c42","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--6cf74cdb-05d3-5c2b-87c0-28df42a33e96"},{"type":"location","id":"location--d8f97962-e60f-580e-80c7-bb324614e41b","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Colombia","country":"CO","region":"americas"},{"type":"relationship","id":"relationship--b75113f1-a635-5705-9657-06b2c45f9bbe","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--d8f97962-e60f-580e-80c7-bb324614e41b"},{"type":"location","id":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Germany","country":"DE","region":"europe"},{"type":"relationship","id":"relationship--39af547d-5f4a-5b84-8f0f-03d3e761a751","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da"},{"type":"location","id":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"United Kingdom","country":"GB","region":"europe"},{"type":"relationship","id":"relationship--f1971536-9aa2-53d6-8d2f-0c0a5bec1b85","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6"},{"type":"location","id":"location--8030edcd-9ba7-51a8-ace6-6cfff266d6ff","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Hong Kong","country":"HK","region":"asia"},{"type":"relationship","id":"relationship--27f358e3-bbb9-5a25-bdf7-c83015de9eeb","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--8030edcd-9ba7-51a8-ace6-6cfff266d6ff"},{"type":"location","id":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"India","country":"IN","region":"asia"},{"type":"relationship","id":"relationship--53998e06-141a-545a-a0d8-12acf6edb688","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82"},{"type":"location","id":"location--fd98b554-2d31-56db-8bc0-812e65009813","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Italy","country":"IT","region":"europe"},{"type":"relationship","id":"relationship--ee16ce90-3928-5561-9f86-c37558a6703e","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--fd98b554-2d31-56db-8bc0-812e65009813"},{"type":"location","id":"location--168ae1d8-d8eb-5440-9d21-d02292700adf","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Japan","country":"JP","region":"asia"},{"type":"relationship","id":"relationship--dfbb0eb3-7b88-591b-aefb-b3dd270fdae4","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--168ae1d8-d8eb-5440-9d21-d02292700adf"},{"type":"location","id":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"South Korea","country":"KR","region":"asia"},{"type":"relationship","id":"relationship--90d6b771-c1cb-5b8f-abea-ea6491da2a31","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451"},{"type":"location","id":"location--e6a15e3d-a6f4-57b1-8ecb-a2a326fbe2f4","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Mongolia","country":"MN","region":"asia"},{"type":"relationship","id":"relationship--7082e5b0-64a7-5cf8-a021-5aee2347e3a1","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--e6a15e3d-a6f4-57b1-8ecb-a2a326fbe2f4"},{"type":"location","id":"location--688e8d70-71a7-5dbf-9456-491580df260f","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Netherlands","country":"NL","region":"europe"},{"type":"relationship","id":"relationship--a06dd738-32dd-529a-a170-6d825e9a3b80","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--688e8d70-71a7-5dbf-9456-491580df260f"},{"type":"location","id":"location--7588a13c-1acb-50cb-80b0-1ecfe3aba822","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Philippines","country":"PH","region":"asia"},{"type":"relationship","id":"relationship--62edf1a7-931b-5487-8774-edc1c77f493d","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--7588a13c-1acb-50cb-80b0-1ecfe3aba822"},{"type":"location","id":"location--4ea5f174-f6ea-5fe4-acc4-765448fbce0a","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Saudi Arabia","country":"SA","region":"asia"},{"type":"relationship","id":"relationship--377252fd-967b-5bf8-a108-7a8ac544d4c7","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--4ea5f174-f6ea-5fe4-acc4-765448fbce0a"},{"type":"location","id":"location--64282129-6afb-5607-8988-27d394389a0e","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Sweden","country":"SE","region":"europe"},{"type":"relationship","id":"relationship--0b257806-23cf-5b95-8181-57a9b9e6bc22","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--64282129-6afb-5607-8988-27d394389a0e"},{"type":"location","id":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"United States","country":"US","region":"americas"},{"type":"relationship","id":"relationship--3f3149e3-a9e3-5f93-a378-297bac044b30","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505"},{"type":"location","id":"location--8f34f33b-92b3-51fa-baaa-707cc2d2e440","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","name":"Uruguay","country":"UY","region":"americas"},{"type":"relationship","id":"relationship--17b2645d-d59a-5efd-bd6c-3e90fdcd8f1d","spec_version":"2.1","created":"2026-05-20T09:50:11.984763+00:00","modified":"2026-07-28T19:36:41.862+00:00","relationship_type":"targets","source_ref":"intrusion-set--a99d827e-f1aa-5af5-8412-97bd298e6c1a","target_ref":"location--8f34f33b-92b3-51fa-baaa-707cc2d2e440"}]}